Layer 2,3,IPv6+QoS Switch
_____________________________________________________________________________
Layer 2,3,IPv6+QoS Network Switch User Manual Version 0.1 Page: 327/970
Default Setting
Disable, 20
Command Mode
Global Config
6.13.2.3 dos-control tcpfrag
This command enables TCP Fragment Denial of Service protection. If the mode is enabled,
Denial of Service prevention is active for this type of attack. If packets ingress having IP
Fragment Offset equal to one (1), the packets will be dropped if the mode is enabled.
Syntax
dos-control tcpfrag
no dos-control tcpfrag
no - This command disabled TCP Fragment Denial of Service protection.
Default Setting
Disable
Command Mode
Global Config
6.13.2.4 dos-control tcpflag
This command enables TCP Flag Denial of Service protections. If the mode is enabled, Denial
of Service prevention is active for this type of attacks. If packets ingress having TCP Flag SYN
set and a source port less than 1024 or having TCP Control Flags set to 0 and TCP Sequence
Number set to 0 or having TCP Flags FIN, URG, and PSH set and TCP Sequence Number set
to 0 or having TCP Flags SYN and FIN both set, the packets will be dropped if the mode is
enabled.
Syntax
To Next Page
Loading...
Need help?
General
