Cisco 11503 Administration Guide - Page 205

Chapter 5 Configuring Simple Network Management Protocol (SNMP) Configuring Denial of Service (DoS) DoS Quick Start Table 5-2 provides a quick overview of the steps required to configure special enterprise traps to notify the trap host of DoS attacks on your system. Each step includes the CLI command required to complete the task. For a complete description of each feature and all the options associated with the CLI command, see the sections following Table 5-2. Table 5-2 Denial of Service Configuration Quick Start Task and Command Example 1. Enable enterprise traps if not already enabled. (config)# snmp trap-type enterprise 2. Set the trap threshold to notify the trap host of DoS attacks with illegal addresses, either source or destination. (config)# snmp trap-type enterprise dos-illegal-attack trap-threshold 1 3. Set the trap threshold to notify the trap host of DoS LAND attacks. (config)# snmp trap-type enterprise dos-land-attack trap-threshold 1 4. Set the trap threshold to notify the trap host of DoS smurf attacks. (config)# snmp trap-type enterprise dos-smurf-attack trap-threshold 1 5. Set the trap threshold to notify the trap host of DoS SYN attacks. (config)# snmp trap-type enterprise dos-syn-attack trap-threshold 10 6. Display information about DoS attacks. (config)# show dos summary (config)# show dos 7. Reset the DoS statistics for a CSS to zero, as required. (config)# zero dos statistics OL-5647-02 Cisco Content Services Switch Administration Guide 5-23