ZXR10CommandManual(SecurityVolume)
Syntax
Description
<type>
Defencepolicy,range:0~2
<time>
Tcpconnectionwaittime,inseconds,range:
1~65535,
<num>
Numberofthehalf-jointsdeletedeverytime,
range:1~65535
DefaultsBydefault,thetypevalueis0,thetimevalueis30,andthenum
valueis1.
Instructions�Theplatformversion4.8.20andupgradeversionssupportthis
command.
�Afterthiscommandiscongured,synoodcanusethecon-
guredpolicytohandlethesynoodattack.“Type=0”means
thatdefencetypeistospeedupTCPconnectionageingand
deletetheearliesthalf-connection;“type=1”meansdeleting
oldhalf-connection;“type=2”meansspeedingupTCPconnec-
tionageing.Usethenoformofthiscommandtorestorethe
defaultvalue.
ExampleTospeeduptcpconnectionageinganddeletetheearliesthalf-
connection,theexampledescribeshowtosetageingtimeto10
secondsanddelete3half-connections.
ZXR10(config)#protect
ZXR10(config-protect)#tcpsynflood-protectdefence0time10num3
Related
Commands
tcpsynflood-protectmax-connect
tcpsynflood-protectone-minute
tcpsynflood-protectdisable
PurposeUsethiscommandtodisablesynood.
CommandModesProtectconguration
Syntaxtcpsynflood-protectdisable
Syntax
Description
<type>
Defencepolicy,range:0~2
<time>
Tcpconnectionwaittime,inseconds,range:
1~65535
<num>
Numberofthehalf-connctionsdeletedevery
time,range:1~65535
Instructions�Theplatformversion4.8.20andupgradeversionssupportthis
command.
�Afterthiscommandiscongured,synoodfunctionisdisabled
andthesynoodattackcannotbedefended.
ExampleThisexampledescribeshowtodisablesynoodprotection
96CondentialandProprietaryInformationofZTECORPORATION