Planet WGSW-28040 - Page 120

Command Guide of WGSW-28040
120
length
land-deny
Enable/Disable land-deny protection.
nullscan-deny
Enable/Disable nullscan-deny protection.
pod-deny
Enable/Disable pod-deny protection.
smurf-deny
Enable/Disable smurf-deny protection.
smurf-netmask
Specify smurf netmask.
syn-sportl1024-
deny
Enable/Disable syn-sportl1024-deny protection.
synfin-deny
Enable/Disable synfin-deny protection.
synrst-deny
Enable/Disable synrst-deny protection.
tcp-frag-off-min-ch
eck
Enable/Disable tcp-frag-off-min-check protection.
tcpblat-deny
Enable/Disable tcpblat-deny protection.
tcphdr-min-check
Enable/Disable tcphdr-min-check protection.
tcphdr-min-length
Specify tcphdr-min length.
udpblat-deny
Enable/Disable udpblat-deny protection.
xma-deny
Enable/Disable xma-deny protection.
Default:
Default enable state of all DoS types are enabled.
Default smurf netmask length is 0.
Default tcphdr-min length is 20.
Default icmp-ping-max length is 512.
Default ipv6-min-frag-size length is 1240.
Mode:
Global Configuration
Usage Guide:
DoS is using to protect malicious attack from other devices. This command can configure DUT to enable/disable
following types of attacks.
 daeqsa-deny : Destination MAC equals to source MAC
 icmp-frag-pkts-deny : Fragmented ICMP packets
 icmp-ping-max-length : DoS information
 icmpv4-ping-max-check : Check ICMPv4 ping maximum packets size
 icmpv6-ping-max-check : Check ICMPv6 ping maximum packets size
 ipv6-min-frag-size-check : Check minimum size of IPv6 fragments
 ipv6-min-frag-size-length : DoS information
 land-deny : Source IP equals to destination IP
 nullscan-deny : NULL Scan Attacks
 pod-deny : Ping of Death Attacks