NETGEAR ProSAFE M7100-24X - Dos-Control Icmpfrag; Show Dos-Control

Security Commands
360
ProSAFE M7100 Managed Switches
dos-control icmpv6
This command enables the maximum ICMPv6 packet size for denial of service protection. If the
mode is enabled, denial of service prevention is active for this type of attack. If ingress ICMPv6
echo request (ping) packets have a size greater than the configured value, the packets are
dropped if the mode is enabled.
no dos-control icmpv6
This command disables the maximum ICMPv6 packet size for denial of service protection.
dos-control icmpfrag
This command enables the ICMP fragment for denial of service protection. If the mode is enabled,
denial of service prevention is active for this type of attack. If packets ingress having fragmented
ICMP packets, the packets will be dropped if the mode is enabled.
no dos-control icmpfrag
This command disables the ICMP fragment for denial of service protection.
show dos-control
This command displays denial of service configuration information.
Default • disabled
• The maximum ICMPv6 packe
t size for denial of service protection is 512 Bytes.
Format dos-control icmpv6 <0-16376>
Mode Global Config
Format no dos-control icmpv6
Mode Global Config
Default disabled
Format dos-control icmpfrag
Mode Global Config
Format no dos-control icmpfrag
Mode Global Config
Format show dos-control
Mode Privileged EXEC