NETGEAR M4300 User Manual

Manage Device Security
526
M4300 Series and M4300-96X Fully Managed Switches User Manual
This enables First Fragment DoS prevention, which causes the switch to check DoS
options on first fragment IP packets when switch are receiving fragmented IP packets.
Otherwise, switch ignores the first fragment IP packages.The factory default is Disable.
12. Select the Denial of Service ICMP Fragment Disable or Enable radio button.
Enabling ICMP Fragment DoS prevention causes the switch to drop ICMP Fragmented
packets. The factory default is Disable.
13. Select the Denial of Service SIP=DIP
Disable or Enable radio button.
Enable SIP=DIP DoS prevention causes the switch to drop packets with a source IP
address equal to the destination IP address. The factory default is Disable.
14. Select the Denial of Service SMAC=DMAC
Disable or Enable radio button.
Enabling SMAC=DMAC DoS prevention causes the switch to drop packets with a source
MAC address equal to the destination MAC address. The factory default is Disable.
15. Select the Denial of Service TCP FIN&URG&PSH
Disable or Enable radio button.
Enabling TCP FIN & URG & PSH DoS prevention causes the switch to drop packets with
TCP Flags FIN, URG, and PSH set and TCP Sequence Number=0.
The factory default is
Disable.
16. Select the Denial of Service TCP Flag&Sequence Disable or Enable radio button.
Enabling TCP Flag DoS prevention causes the switch to drop packets with TCP control
flags set to 0 and TCP sequence number set to 0.
The factory default is Disable.
17. Select the Denial of Service TCP Fragment Disable or Enable radio button.
Enabling TCP Fragment DoS prevention causes the switch to drop packets as follows:
First TCP fragments with a TCP payload: IP_Payload_Length - IP_Header_Size <
Min_TCP_Header_Size.
The factory default is Disable.
18. Select the Denial of Service TCP Offset Disable or Enable radio button.
Enabling TCP Offset DoS prevention causes the switch to drop packets with a TCP
header Of
fset=1.
The factory default is Disable.
19. Select the Denial of Service TCP Port Disable or Enable radio button.
Enabling TCP Port DoS prevention causes the switch to drop packets with TCP source
port equal to TCP destination port.
The factory default is Disable.
20. Select the Denial of Service TCP SYN Disable or Enable radio button.
Enabling TCP SYN DoS prevention causes the switch to drop packets with TCP flags
SYN set. The factory default is Disable.
21. Select the Denial of Service TCP SYN & FIN
Disable or Enable radio button.
Enabling TCP SYN & FIN DoS prevention causes the switch to drop packets with TCP
flags SYN and FIN set. The factory default is Disable.

NETGEAR M4300 Specifications

General

Model	M4300
Form Factor	Rack-Mountable
Layer	Layer 3
Stackable	Yes
Managed	Yes
Memory	Varies by model
Flash Memory	Varies by model
Warranty	Lifetime
Ports	Varies by model (24 or 48 ports)
PoE	Available on some models
Port Speed	10/100/1000 Mbps, 10Gbps on uplinks
Forwarding Rate	Varies by model
Jumbo Frame Support	Yes
VLAN Support	Yes
Quality of Service (QoS)	Yes
Security Features	ACLs, 802.1X
Dimensions	Varies by model
Weight	Varies by model
Operating Temperature	0° to 50° C (32° to 122° F)
Power Supply	Internal
Uplink Ports	Varies by model (SFP/SFP+ or 10G SFP+)