Sony SRG-X400 BRC-X400 / X401 / SRG-X400 / X402 / 201M2 / X120 / HD1M2 CGI Com - Page 49

On/Off setting of the SYN Flood Attack, the SYN Flood Attack Protection function

Page 49 highlights

Parameter V6FilterRule V6SynFloodBurst V6SynFloodExpire V6SynFloodLimit V6SynFloodProtection Set Inq Value Description Set [Value1] Setting of IPv6 Filter function rules. Inq 0 to 9 Up to 10 rules can be set. [Value2] IPv6 address [Value3] 0 to 128 V6FilterRule=Value11,Value21,Value31,Value 41,Value51,Value61,Value12,Value22,Value3 2,Value42,Value52,Value62[,...,Value110, Value210,Value310,Value410,Value510, Value610] [Value4] tcp, udp, icmp, all [Value5] 0 to 65535 [Value6] allow, reject [Value1] Setting of rule number Smaller value means higher priorities [Value2] Setting of supported network address [Value3] Setting of subnet mask value QoS supports (bit number from the left side of network address) [Value4] Setting of supported protocol tcp : TCP udp : UDP icmp : ICMP In this case, port number (Value5) will be discarded, but it is still necessary. Filter will be applied for all ICMP messages. all : TCP, UDP, ICMP The port number (Value5) designation only works for TCP and UDP. [Value5] Setting of supported port numbers When set to 0, all the Port numbers are supported. [Value6] Setting of policy allow : Specified accesses to the camera will be allowed. reject : Specified accesses to the camera will be denied. Set 2 to 3 to 60 Setting of continuing numbers of SYN Inq Packet to be judged as attacks by IPv6 SYN Flood Attack Protection function. Set 10 to 60 to 86400 Setting of the predetermined time to Inq discard the results judged as an attack with the SYN Flood Attack Protection function of IPv6 (unit: second) Set 1 to 5 to 1000 Setting of the possible access times per Inq minute after releasing the defense with the SYN Flood Attack Protection function of IPv6. Set on, off On/Off setting of the SYN Flood Attack Inq Protection function of IPv6. 49

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86

49
V6FilterRule
Set
Inq
[Value1]
0
to 9
[Value2]
IPv6 address
[Value3]
0
to 128
[Value4]
tcp
, udp, icmp, all
[Value5]
0
to 65535
[Value6]
allow
, reject
Setting of IPv6 Filter function rules.
Up to 10 rules can be set.
V6FilterRule=Value11,Value21,Value31,Value
41,Value51,Value61,Value12,Value22,Value3
2,Value42,Value52,Value62[,…,Value110,
Value210,Value310,Value410,Value510,
Value610]
[Value1]
Setting of rule number
Smaller value means higher priorities
[Value2]
Setting of supported network address
[Value3]
Setting of subnet mask value QoS supports
(bit number from the left side of network
address)
[Value4]
Setting of supported protocol
tcp
: TCP
udp
: UDP
icmp : ICMP
In this case, port number (Value5) will be
discarded, but it is still necessary. Filter will
be applied for all ICMP messages.
all
: TCP, UDP, ICMP
The port number (Value5) designation only
works for TCP and UDP.
[Value5]
Setting of supported port numbers
When set to 0, all the Port numbers are
supported.
[Value6]
Setting of policy
allow
: Specified accesses to the camera
will be allowed.
reject
: Specified accesses to the camera
will be denied.
V6SynFloodBurst
Set
Inq
2 to
3
to 60
Setting of continuing numbers of SYN
Packet to be judged as attacks by IPv6 SYN
Flood Attack Protection function.
V6SynFloodExpire
Set
Inq
10 to
60
to 86400
Setting of the predetermined time to
discard the results judged as an attack with
the SYN Flood Attack Protection function of
IPv6 (unit: second)
V6SynFloodLimit
Set
Inq
1 to
5
to 1000
Setting of the possible access times per
minute after releasing the defense with the
SYN Flood Attack Protection function of
IPv6.
V6SynFloodProtection
Set
Inq
on,
off
On/Off setting of the SYN Flood Attack
Protection function of IPv6.
Parameter
Set
Inq
Value
Description