Home » Netgear Manuals » Hubs & Switches » Netgear XSM7224S » Manual Viewer

Netgear XSM7224S XMS7224S CLI Manual - Page 231

dos-control tcpoffset, dos-control tcpsyn

UPC - 606449073706

Add to My Manuals
Save this manual to your list of manuals

Page 231 highlights

ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0 dos-control tcpoffset This command enables TCP Offset Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress having TCP Header Offset equal to one (1), the packets will be dropped if the mode is enabled. Default Format Mode disabled dos-control tcpoffset Global Config no dos-control tcpoffset This command disabled TCP Offset Denial of Service protection. Format Mode no dos-control tcpoffset Global Config dos-control tcpsyn This command enables TCP SYN and L4 source = 0-1023 Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress having TCP flag SYN set and an L4 source port from 0 to 1023, the packets will be dropped if the mode is enabled. Default Format Mode disabled dos-control tcpsyn Global Config no dos-control tcpsyn This command sets disables TCP SYN and L4 source = 0-1023 Denial of Service protection. Format Mode no dos-control tcpsyn Global Config Switching Commands v1.0, November 2010 3-190

Section	Page
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0	1
Contents	5
About This Manual	9
Audience	9
About the Software	9
Scope	10
Product Concept	10
Conventions, Formats, and Scope	10
How to Print This Manual	12
Revision History	12
Chapter 1 Using the Command-Line Interface	13
Command Syntax	13
Command Conventions	14
Common Parameter Values	15
Unit/Slot/Port Naming Convention	15
Using the “No” Form of a Command	16
Managed Switch Modules	17
Command Modes	17
Command Completion and Abbreviation	21
CLI Error Messages	21
CLI Line-Editing Conventions	22
Using CLI Help	23
Accessing the CLI	24
Chapter 2 Stacking Commands	25
Dedicated Port Stacking	25
Front Panel Stacking Commands	34
Non-Stop Forwarding Commands	36
Stack Firmware Synchronization Commands	38
Chapter 3 Switching Commands	42
Port Configuration Commands	43
Spanning Tree Protocol (STP) Commands	52
VLAN Commands	73
Double VLAN Commands	88
Voice VLAN Commands	91
Provisioning (IEEE 802.1p) Commands	93
Protected Ports Commands	94
Private Group Commands	97
GARP Commands	99
GVRP Commands	102
GMRP Commands	104
Port-Based Network Access Control Commands	107
Storm-Control Commands	123
Port-Channel/LAG (802.3ad) Commands	135
Port Mirroring	156
Static MAC Filtering	159
DHCP Snooping Configuration Commands	164
Dynamic ARP Inspection Commands	175
IGMP Snooping Configuration Commands	183
IGMP Snooping Querier Commands	192
Port Security Commands	198
LLDP (802.1AB) Commands	202
LLDP-MED Commands	213
Denial of Service Commands	224
MAC Database Commands	236
ISDP Commands	238
Priority-Based Flow control commands	244
Chapter 4 Routing Commands	247
Address Resolution Protocol (ARP) Commands	247
IP Routing Commands	254
Virtual LAN Routing Commands	266
DHCP and BOOTP Relay Commands	267
IP Helper Commands	270
ICMP Throttling Commands	272
Chapter 5 Quality of Service (QoS) Commands	275
Class of Service (CoS) Commands	276
Differentiated Services (DiffServ) Commands	283
DiffServ Class Commands	285
DiffServ Policy Commands	294
DiffServ Service Commands	299
DiffServ Show Commands	301
MAC Access Control List (ACL) Commands	307
IP Access Control List (ACL) Commands	312
IPv6 Access Control List (ACL) Commands	319
Auto-Voice over IP Commands	323
Chapter 6 Utility Commands	325
Auto Install Commands	326
Dual Image Commands	328
System Information and Statistics Commands	330
Logging Commands	342
System Utility and Clear Commands	347
Simple Network Time Protocol (SNTP) Commands	357
DHCP Server Commands	364
DNS Client Commands	378
Packet Capture Commands	384
Serviceability Packet Tracing Commands	386
Cable Test Command	406
sFlow Commands	407
Software License Commands	412
IP Address Conflict Commands	414
Link Local Protocol Filtering Commands	415
Chapter 7 Management Commands	417
Configuring the Switch Management CPU	418
Network Interface Commands	420
Console Port Access Commands	424
Telnet Commands	427
Secure Shell (SSH) Commands	432
Management Security Commands	435
Hypertext Transfer Protocol (HTTP) Commands	436
Access Commands	444
User Account Commands	445
SNMP Commands	463
RADIUS Commands	475
TACACS+ Commands	489
Configuration Scripting Commands	493
Pre-login Banner and System Prompt Commands	495
Switch Database Management (SDM) Templates	496
Chapter 8 Log Messages	499
Core	499
Utilities	502
Management	504
Switching	508
QoS	514
Routing/IPv6 Routing	515
Multicast	519
Stacking	521
Technologies	521
O/S Support	524
Chapter 9 Captive Portal Commands	526
Captive Portal Global Commands	526
Captive Portal Configuration Commands	530
Captive Portal Status Commands	539
Captive Portal Client Connection Commands	544
Captive Portal Interface Commands	548
Captive Portal Local User Commands	549
Captive Portal User Group Commands	556
Chapter 10 Command List	558
clear checkpoint statistics 2-14	558
{deny \| permit} (IP ACL) 5-41	558
{deny \| permit} (IPv6) 5-46	558
{deny \| permit} (MAC ACL) 5-34	558
aaa authentication dot1x 7-45	558
aaa authentication enable 7-43	558
aaa authentication login 7-42	558
aaa ias-user username 7-46	558
access-list 5-38	558
acl-trapflags 5-43	558
addport 3-95	558
arp 4-1	558
arp access-list 3-137	558
arp cachesize 4-3	558
arp dynamicrenew 4-3	558
arp purge 4-4	558
arp resptime 4-4	558
arp retries 4-4	558
arp timeout 4-5	558
assign-queue 5-21	558
authentication timeout 9-3	558
authorization network radius 7-59	558
auto-negotiate 3-3	558
auto-negotiate all 3-4	558
auto-voip 5-50	558
auto-voip all 5-49	558
block 9-14	558
boot auto-copy-sw 2-15	558
boot auto-copy-sw allow-downgrade 2-16	558
boot auto-copy-sw trap 2-16	558
boot autoinstall auto-save 6-3	558
boot autoinstall retry-count 6-4	558
boot autoinstall start 6-3	558
boot autoinstall stop 6-3	558
boot system 6-5	559
bootfile 6-44	559
bootpdhcprelay cidoptmode 4-21	559
bootpdhcprelay maxhopcount 4-22	559
bootpdhcprelay minwaittime 4-22	559
bridge aging-time 3-195	559
cablestatus 6-82	559
captive-portal client deauthenticate 9-23	559
captive-portal 9-1	559
capture wrap 6-61	559
class 5-22	559
class-map 5-12	559
class-map rename 5-13	559
classofservice dot1p-mapping 5-2	559
classofservice ip-dscp-mapping 5-2	559
classofservice trust 5-3	559
clear aaa ias-users 7-47	559
clear arp-cache 4-5	559
clear arp-switch 4-6	559
clear captive-portal users 9-31	559
clear config 6-26	559
clear counters 6-26	559
clear dot1x authentication-history 3-73	559
clear dot1x statistics 3-66	559
clear host 6-58	559
clear igmpsnooping 6-27	559
clear ip address-conflict-detect 6-90	559
clear ip arp inspection statistics 3-140	559
clear ip dhcp binding 6-50	559
clear ip dhcp conflict 6-51	559
clear ip dhcp server statistics 6-50	559
clear ip dhcp snooping binding 3-132	559
clear ip dhcp snooping statistics 3-132	559
clear ip route all 4-13	559
clear isdp counters 3-199	559
clear isdp table 3-199	559
clear lldp remote-data 3-165	559
clear lldp statistics 3-165	559
clear logging buffered 6-26	559
clear mac-addr-table 6-26	559
clear pass 6-27	560
clear port-channel 6-27	560
clear radius statistics 3-66	560
clear traplog 6-27	560
clear vlan 6-27	560
client-identifier 6-40	560
client-name 6-41	560
clock timezone 6-36	560
configuration 7-8	560
configuration (Captive Portal) 9-5	560
conform-color 5-22	560
copy 6-31	560
copy (pre-login banner) 7-80	560
cos-queue min-bandwidth 5-4	560
cos-queue random-detect 5-5	560
cos-queue strict 5-4	560
crypto certificate generate 7-19	560
crypto key generate dsa 7-20	560
crypto key generate rsa 7-20	560
datacenter-bridging priority-flow-control mode on 3-204	560
datacenter-bridging priority-flow-control priority 3-204	560
debug arp 6-62	560
debug auto-voip 6-62	560
debug clear 6-63	560
debug console 6-63	560
debug dot1x packet 6-64	560
debug igmpsnooping packet 6-64	560
debug igmpsnooping packet receive 6-66	560
debug igmpsnooping packet transmit 6-65	560
debug ip acl 6-67	560
debug ip dvmrp packet 6-67	560
debug ip igmp packet 6-68	560
debug ip mcache packet 6-68	560
debug ip pimdm packet 6-69	560
debug ip pimsm packet 6-70	560
debug ip vrrp 6-70	560
debug ipv6 mcache packet 6-71	560
debug ipv6 mld packet 6-71	560
debug ipv6 pimdm packet 6-72	560
debug ipv6 pimsm packet 6-72	560
debug isdp packet 3-203	561
debug lacp packet 6-73	561
debug mldsnooping packet 6-73	561
debug ospf packet 6-74	561
debug ospfv3 packet 6-76	561
debug ping packet 6-77	561
debug rip packet 6-78	561
debug sflow packet 6-79	561
debug spanning-tree bpdu 6-79	561
debug spanning-tree bpdu receive 6-80	561
debug spanning-tree bpdu transmit 6-81	561
default-router 6-41	561
delete 6-4	561
deleteport (Global Config) 3-96	561
deleteport (Interface Config) 3-95	561
description 3-5	561
diffserv 5-11	561
disconnect 7-28	561
dns-server 6-42	561
domain-name 6-45	561
dos-control all 3-184	561
dos-control firstfrag 3-185	561
dos-control icmp 3-187	561
dos-control icmpfrag 3-193	561
dos-control icmpv4 3-192	561
dos-control icmpv6 3-192	561
dos-control l4port 3-186	561
dos-control sipdip 3-184	561
dos-control smacdmac 3-187	561
dos-control tcpfinurgpsh 3-191	561
dos-control tcpflag 3-186	561
dos-control tcpflagseq 3-189	561
dos-control tcpfrag 3-185	561
dos-control tcpoffset 3-190	561
dos-control tcpport 3-188	561
dos-control tcpsyn 3-190	561
dos-control tcpsynfin 3-191	561
dos-control udpport 3-188	561
dot1x dynamic-vlan enable 3-74	561
dot1x guest-vlan 3-67	561
dot1x initialize 3-67	562
dot1x max-req 3-67	562
dot1x max-users 3-68	562
dot1x port-control 3-68	562
dot1x port-control all 3-69	562
dot1x re-authenticate 3-70	562
dot1x re-authentication 3-70	562
dot1x system-auth-control 3-70	562
dot1x system-auth-control monitor 3-74	562
dot1x timeout 3-71	562
dot1x unauthenticated-vlan 3-72	562
dot1x user 3-73	562
drop 5-21	562
dvlan-tunnel ethertype 3-47	562
enable (Privileged EXEC access) 7-4	562
enable authentication 7-10	562
enable password 6-28	562
enable 9-1	562
enable (Instance) 9-6	562
encapsulation 4-13	562
ezconfig 7-2	562
filedescr 6-5	562
group 9-8	562
hardware-address 6-42	562
host 6-43	562
http port 9-2	562
https port 9-2	562
idle-timeout 9-12	562
interface 3-2	562
interface lag 3-3	562
interface range 3-3	562
interface vlan 3-3	562
interface (Captive Portal) 9-13	562
ip access-group 5-42	562
ip access-list 5-40	562
ip access-list rename 5-41	562
ip address 4-9	562
ip address-conflict-detect run 6-90	562
ip arp inspection filter 3-137	562
ip arp inspection limit 3-136	562
ip arp inspection trust 3-136	563
ip arp inspection validate 3-135	563
ip arp inspection vlan 3-134	563
ip arp inspection vlan logging 3-135	563
ip dhcp bootp automatic 6-49	563
ip dhcp conflict logging 6-50	563
ip dhcp excluded-address 6-47	563
ip dhcp ping packets 6-48	563
ip dhcp pool 6-40	563
ip dhcp snooping 3-123	563
ip dhcp snooping binding 3-125	563
ip dhcp snooping database 3-124	563
ip dhcp snooping database write-delay 3-125	563
ip dhcp snooping limit 3-126	563
ip dhcp snooping log-invalid 3-127	563
ip dhcp snooping trust 3-127	563
ip dhcp snooping verify mac-address 3-124	563
ip dhcp snooping vlan 3-123	563
ip domain list 6-55	563
ip domain lookup 6-54	563
ip domain name 6-55	563
ip domain retry 6-57	563
ip domain timeout 6-58	563
ip helper-address 4-25	563
ip helper-address (Global Config) 4-24	563
ip helper-address discard 4-25	563
ip host 6-56	563
ip http authentication 7-23	563
ip http java 7-22	563
ip http secure-port 7-26	563
ip http secure-protocol 7-27	563
ip http secure-server 7-21	563
ip http secure-session hard-timeout 7-25	563
ip http secure-session maxsessions 7-24	563
ip http secure-session soft-timeout 7-25	563
ip http server 7-21	563
ip http session hard-timeout 7-22	563
ip http session maxsessions 7-23	563
ip http session soft-timeout 7-24	563
ip https authentication 7-26	563
ip icmp echo-reply 4-27	564
ip icmp error-interval 4-28	564
ip igmpsnooping unknown-multicast 3-148	564
ip mtu 4-12	564
ip name server 6-56	564
ip netdirbcast 4-11	564
ip proxy-arp 4-2	564
ip redirects 4-27	564
ip route 4-9	564
ip route default 4-10	564
ip route distance 4-11	564
ip routing 4-8	564
ip ssh 7-16	564
ip ssh protocol 7-17	564
ip ssh server enable 7-17	564
ip telnet server enable 7-11	564
ip unreachables 4-26	564
ip verify binding 3-125	564
ip verify source 3-128	564
ipv6 access-list 5-45	564
ipv6 access-list rename 5-46	564
ipv6 host 6-57	564
ipv6 traffic-filter 5-47	564
isdp advertise-v2 3-198	564
isdp enable 3-198	564
isdp holdtime 3-197	564
isdp run 3-197	564
isdp timer 3-198	564
key 7-75	564
lacp actor admin 3-97	564
lacp actor admin key 3-97	564
lacp actor admin state individual 3-98	564
lacp actor admin state longtimeout 3-99	564
lacp actor admin state passive 3-99	564
lacp actor port priority 3-100	564
lacp actor system priority 3-100	564
lacp admin key 3-96	564
lacp collector max-delay 3-97	564
lacp partner admin key 3-101	564
lacp partner admin state individual 3-102	564
lacp partner admin state longtimeout 3-102	565
lacp partner admin state passive 3-103	565
lacp partner port id 3-104	565
lacp partner port priority 3-104	565
lacp partner system id 3-105	565
lacp partner system priority 3-106	565
lease 6-43	565
line 7-8	565
lldp med 3-172	565
lldp med all 3-174	565
lldp med confignotification 3-173	565
lldp med confignotification all 3-174	565
lldp med faststartrepeatcount 3-175	565
lldp med transmit-tlv 3-173	565
lldp med transmit-tlv all 3-175	565
lldp notification 3-164	565
lldp notification-interval 3-165	565
lldp receive 3-162	565
lldp timers 3-162	565
lldp transmit 3-161	565
lldp transmit-mgmt 3-164	565
lldp transmit-tlv 3-163	565
llpf blockall 6-91	565
locale 9-13	565
logging buffered 6-18	565
logging buffered wrap 6-18	565
logging cli-command 6-19	565
logging console 6-19	565
logging host 6-20	565
logging host remove 6-20	565
logging persistent 6-23	565
logging syslog 6-20	565
login authentication 7-9	565
logout 6-28	565
mac access-group 5-36	565
mac access-list extended 5-33	565
mac access-list extended rename 5-34	565
macfilter 3-118	565
macfilter adddest 3-119	565
macfilter adddest all 3-120	565
macfilter addsrc 3-120	566
macfilter addsrc all 3-121	566
mark cos 5-23	566
mark ip-precedence 5-24	566
match any 5-13	566
match class-map 5-14	566
match cos 5-15	566
match destination-address mac 5-15	566
match dstip 5-16	566
match dstip6 5-16	566
match dstl4port 5-16	566
match ethertype 5-13	566
match ip dscp 5-17	566
match ip precedence 5-17	566
match ip tos 5-18	566
match ip6flowlbl 5-15	566
match protocol 5-18	566
match source-address mac 5-19	566
match srcip 5-19	566
match srcip6 5-19	566
match srcl4port 5-20	566
max-bandwidth-down 9-9	566
max-bandwidth-up 9-9	566
max-input-octets 9-10	566
max-output-octets 9-11	566
max-total-octets 9-11	566
member 2-2	566
mirror 5-21	566
mode dot1q-tunnel 3-48	566
mode dvlan-tunnel 3-48	566
monitor session 3-116	566
movemanagement 2-3	566
mtu 3-5	566
name 9-6	566
netbios-name-server 6-45	566
netbios-node-type 6-46	566
network (DHCP Pool Config) 6-44	566
network javamode 7-6	566
network mac-address 7-5	566
network mac-type 7-5	566
network mgmt_vlan 3-32	567
network parms 7-4	567
network protocol 7-5	567
next-server 6-46	567
no boot auto-copy-sw 2-15	567
no boot auto-copy-sw allow-downgrade 2-16	567
no boot auto-copy-sw trap 2-16	567
no llpf 6-91	567
no monitor 3-116	567
no nsf 2-13	567
no sdm prefer 7-81	567
nsf 2-13	567
option 6-47	567
password (AAA IAS User Configuration) 7-46	567
passwords aging 7-35	567
passwords history 7-35	567
passwords lock-out 7-36	567
passwords min-length 7-34	567
passwords strength exclude-keyword 7-40	567
passwords strength maximum consecutive-characters 7-39	567