Security Commands
353
ProSAFE M7100 Managed Switches
no dos-control all
This command disables Denial of Service prevention checks globally.
dos-control sipdip
This command enables Source IP address = Destination IP address (SIP=DIP) Denial of Service
protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If
packets ingress with SIP=DIP, the packets will be dropped if the mode is enabled.
no dos-control sipdip
This command disables Source IP address = Destination IP address (SIP=DIP) Denial of Service
prev
ention.
dos-control firstfrag
This command enables Minimum TCP Header Size Denial of Service protection. If the mode is
enabled, Denial of Service prevention is active for this type of attack. If packets ingress having a
TCP Header Size smaller then the configured value, the packets will be dropped if the mode is
enabled. The default is disabled. If you enable dos-control firstfrag, but do not provide a
Minimum TCP header size, the system sets that value to 20.
Format no dos-control all
Mode Global Config
Default disabled
Format dos-control sipdip
Mode Global Config
Format no dos-control sipdip
Mode Global Config
Default • disabled
• Minimum T
CP he
ader size is 20
Format dos-control firstfrag [<0-255>]
Mode Global Config
To Next Page
Loading...
Need help?
General