Netgear M5300-52G3 Command Line Interface (CLI) User Manual - Page 214
dos-control sipdip, dos-control firstfrag
View all Netgear M5300-52G3 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 214 highlights
ProSafe Managed Switch dos-control sipdip This command enables Source IP address = Destination IP address (SIP=DIP) Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress with SIP=DIP, the packets will be dropped if the mode is enabled. Default Format Mode disabled dos-control sipdip Global Config no dos-control sipdip This command disables Source IP address = Destination IP address (SIP=DIP) Denial of Service prevention. Format Mode no dos-control sipdip Global Config dos-control firstfrag This command enables Minimum TCP Header Size Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress having a TCP Header Size smaller then the configured value, the packets will be dropped if the mode is enabled.The default is disabled. If you enable dos-control firstfrag, but do not provide a Minimum TCP Header Size, the system sets that value to 20. Default Format Mode disabled dos-control firstfrag [] Global Config no dos-control firstfrag This command sets Minimum TCP Header Size Denial of Service protection to the default value of disabled. Format Mode no dos-control firstfrag Global Config Switching Commands 214