LevelOne GEL-2060 Guida rapida

http://www.level1.com -1-

GEL-2060

DoS-Attack Prevention Configuration

Commands

Table of Contents

http://www.level1.com - 2-

Table of Contents

Chapter 1 DoS Attack Prevention Configuration Commands ............................................................................................... 3

1.1 DoS-Attack Prevention Configuration Commands ................................................................................................ 3

1.1.1 dos enable................................................................................................................................................. 3

1.1.2 show dos ................................................................................................................................................... 4

DoS Attack Prevention Configuration Commands

http://www.level1.com -3-

Chapter 1 DoS Attack Prevention Configuration

Commands

1.1 DoS-Attack Prevention Configuration Commands

DoS attack prevention configuration commands are shown below:

dos enable

show dos

1.1.1 dos enable

Syntax

dos enable {all | icmp icmp-value | ip | ipv4firstfrag | l4port | mac | tcpflags |

tcpfrag tcpfrag-value}

no dos enable {all | icmp | ip | ipv4firstfrag | l4port | mac | tcpflags | tcpfrag}

Parameter

Description

all

Enables to prevent all kinds of DoS attacks.

icmp icmp-value

Prevents the ICMP DoS attacks. Here, the icmp-value

parameter means the maximum length of ICMP packet, whose

default value is 512.

Prevents those DoS attack packets whose source IP addresses

are equal to the destination IP addresses.

ipv4firstfrag

Starts to check the first fragment of IP packet.

l4port

Starts to check the L4 packets whose source port is equal to the

destination port.

mac

Starts to check those packets whose source MACs are equal to

destination MACs.

tcpflags

Starts to check the TCP packets with illegal flags.

tcpfrag tcpfrag-value

Starts to check the DoS attack packet of TCP fragment. Here,

the tcpfrag-value parameter means the minimum TCP header,

whose default value is 20.

Default value

DoS attack prevention is disabled by default.

Remarks

DoS attack prevention is configured in global mode.

The DoS IP sub-function can drop those IP packets whose source IPs are equal to

the destination IPs.

DoS Attack Prevention Configuration Commands

http://www.level1.com -4-

The DoS ICMP sub-function can drop the following two kinds of packets: 1.

ICMPv4/v6 ping packets whose size is larger than icmp-value; 2. ICMP packets.

The DoS l4port sun-function can drop those TCP/UDP packets whose source port

is equal to the destination port.

The DoS MAC sub-function can drop those packets whose source MACs are equal

to destination MACs.

The DoS tcpflags sub-function can drop the following 4 kinds of TCP packets: 1.

TCP SYN flag=1 & source port<1024; 2.TCP control flags = 0 & sequence = 0;

3.TCP FIN URG PSH =1 & sequence = 0; 4.TCP FIN SYN =1.

The DoS tcpfrag sub-function can drop the following two kinds of TCP packets: 1.

The TCP header is smaller than the first TCP fragment of tcpfrag-value; 2. TCP

fragments whose offset values are 1.

Example

The following example shows how to set the global DoS attack prevention function

to prevent those IP packets whose source IPs are destination IP addresses.

Switch_config#dos enable ip

The following example shows how to set DoS attack prevention in global mode to

prevent those packets whose maximum ICMP length is bigger than 255.

Switch_config#dos enable icmp 255

1.1.2 show dos

Syntax

show dos

It is used to show all DoS attack prevention functions that users have set.

Parameter

N/A

Default value

N/A

Remarks

EXEC mode

Example

The following example shows how to display all DoS attack prevention functions.

Switch_config#dos enable all

Switch_config#show dos

dos enable ip

dos enable ipv4firstfrag

dos enable tcpflags

dos enable l4port

dos enable mac

DoS Attack Prevention Configuration Commands

http://www.level1.com -5-

dos enable tcpfrag

dos enable icmp

Switch_config#

The following example shows how to set dos enable icmp to display the

sub-function that users have set.

Switch_config#dos enable icmp

Switch_config#show dos

dos enable icmp

The following example shows how to set dos enable icmp 255 to display the

sub-function that users have set.

Switch_config#dos enable icmp 255

Switch_config#show dos

dos enable icmp 255

Altri manuali per GEL-2060

Indice

Altri manuali LevelOne Interruttore

LevelOne

LevelOne GSW-1641 Manuale utente

LevelOne

LevelOne GEL-2871-v1 Manuale utente

LevelOne

LevelOne Infinity IES-1611 Manuale utente

LevelOne

LevelOne GNS-8000A Manuale utente

LevelOne

LevelOne FGP-1031 Manuale utente

LevelOne

LevelOne FSW-2106 Manuale utente

LevelOne

LevelOne FEP-0311 Manuale utente

LevelOne

LevelOne GSW-1674T Manuale utente

LevelOne

LevelOne FEP-0311 Manuale utente

LevelOne

LevelOne GSW-0503T Manuale utente

LevelOne

LevelOne KCM-0831 Manuale utente

LevelOne

LevelOne FSW-0507TX Manuale utente

LevelOne

LevelOne FEP-0931 Manuale utente

LevelOne

LevelOne GSW-1676 Manuale utente

LevelOne

LevelOne GEP - 5271 Manuale utente

LevelOne

LevelOne Infinity IES-0880 Manuale utente

LevelOne

LevelOne KVM-0831 Manuale utente

LevelOne

LevelOne GSW-0509 Manuale utente

LevelOne

LevelOne KVM-0306 Manuale utente

LevelOne

LevelOne GSW-2453 Manuale utente

LevelOne

LevelOne KCM-0832 Manuale utente

LevelOne

LevelOne GEU-1621 Manuale utente

LevelOne

LevelOne Infinity IES-2880 Manuale utente

LevelOne

LevelOne IGP-1061 Manuale utente

Manuali Interruttore popolari di altre marche

URC

URC Total Control MFS-8 Manuale utente

Azbil

Azbil HPQ-D11 Manuale utente

Sony

Sony DFS-900M Manuale utente

SICK

SICK i17S Manuale utente

F&F

F&F SZR-277 Manuale utente

Shure

Shure UAMS/BK Manuale utente

Dräger

Dräger X-zone Switch Off Manuale utente

Asco

Asco Joucomatic 349 Series Manuale utente

BT Mini Hub Manuale utente

D-Link

D-Link DES-1226G Manuale utente

Johnson Controls

Johnson Controls FS80-C Manuale utente

Alcatel-Lucent

Alcatel-Lucent 7450 ESS-12 Manuale utente

MicroNet

MicroNet SP1200A Manuale utente

Ruijie

Ruijie RG-PF2920 Series Manuale di installazione e funzionamento

Altinex

Altinex DA1914SX Manuale utente

MiLAN

MiLAN MIL-SM2401M Manuale utente

RJM

RJM MASTERMIND PBC/6X Manuale utente

Atlas

Atlas MMK-KVM8 Manuale utente