Netgear XSM4324FS CLI Manual Software Version 12.x - Page 620
dos-control tcpfrag, Sequence Number set to 0 or having TCP Flags FIN, URG
View all Netgear XSM4324FS manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 620 highlights
M4300 Intelligent Edge Series Fully Managed Stackable Switches no dos-control firstfrag This command sets Minimum TCP Header Size Denial of Service protection to the default value of disabled. Format Mode no dos-control firstfrag Global Config dos-control tcpfrag This command enables TCP Fragment Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack and packets that have a TCP payload in which the IP payload length minus the IP header size is less than the minimum allowed TCP header size are dropped. Default Format Mode disabled dos-control tcpfrag Global Config no dos-control tcpfrag This command disables TCP Fragment Denial of Service protection. Format Mode no dos-control tcpfrag Global Config dos-control tcpflag This command enables TCP Flag Denial of Service protections. If the mode is enabled, Denial of Service prevention is active for this type of attacks. If packets ingress having TCP Flag SYN set and a source port less than 1024 or having TCP Control Flags set to 0 and TCP Sequence Number set to 0 or having TCP Flags FIN, URG, and PSH set and TCP Sequence Number set to 0 or having TCP Flags SYN and FIN both set, the packets will be dropped if the mode is enabled. Default Format Mode disabled dos-control tcpflag Global Config Switching Commands 620 CLI Command Reference Manual