TP-Link T1600G-18TSTL-SG2216 T1600G-18TSUN V1 CLI Reference Guide Guide - Page 109
ip dos-prevent type For other switches
View all TP-Link T1600G-18TSTL-SG2216 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 109 highlights
System bugs, which will cause the host with a blue screen. smurf -- The attacker broadcasts large numbers of Internet Control Message Protocol (ICMP) packets with the intended victim's spoofed source IP to a computer network using an IP broadcast address. Most devices on a network will respond to this by sending a reply to the source IP address. If the number of devices on the network that receive and respond to these packets is very large, the victim's host will be flooded with traffic, which can slow down the victim's host and cause the host impossible to work on. ping-of-death -- The attacker sends an improperly large Internet Control Message Protocol (ICMP) echo request packet, or a ping packet, with the purpose of overflowing the input buffers of the destination host and causing the host to crash. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable the DoS Defend Type named Land attack: T1600G-18TS(config)#ip dos-prevent type land 13.3 ip dos-prevent type (For other switches) Description The ip dos-prevent type command is used to select the DoS Defend Type. To disable the corresponding Defend Type, please use no ip dos-prevent type command. Syntax ip dos-prevent type { land | scan-synfin | xma-scan | null-scan | port-less-1024 | blat | ping-flood | syn-flood | win-nuke } no ip dos-prevent type { land | scan-synfin | xma-scan | null-scan | port-less-1024 | blat | ping-flood | syn-flood | win-nuke } Parameter land --The attacker sends a specific fake SYN (synchronous) packet to the destination host. Because both of the source IP address and the destination 92