NETGEAR ProSAFE M7100-24X - Dos-Control Tcpflagseq; Dos-Control Tcpoffset

Security Commands
357
ProSAFE M7100 Managed Switches
dos-control tcpflagseq
This command enables TCP Flag and Sequence Denial of Service protections. If the mode is
enabled, Denial of Service prevention is active for this type of attack. If packets ingress having
TCP Flag SYN set and a source port less than 1024 or having TCP Control Flags set to 0 and TCP
Sequence Number set to 0 or having TCP Flags FIN, URG, and PSH set and TCP Sequence Number
set to 0 or having TCP Flags SYN and FIN both set, the packets will be dropped if the mode is
enabled.
no dos-control tcpflagseq
This command disables TCP Flag and Sequence Denial of Service protection.
dos-control tcpoffset
This command enables TCP Offset Denial of Service protection. If the mode is enabled, Denial of
Service prevention is active for this type of attack. If packets ingress having TCP Header Offset
equal to one (1), the packets will be dropped if the mode is enabled.
no dos-control tcpoffset
This command disabled TCP Offset Denial of Service protection.
Default disabled
Format dos-control tcpflagseq
Mode Global Config
Format no dos-control tcpflagseq
Mode Global Config
Default disabled
Format dos-control tcpoffset
Mode Global Config
Format no dos-control tcpoffset
Mode Global Config