Avaya G430 Manual page 57

3. Use the set mss-notification rate command to modify the MSS reporting
4. Ensure that INADS reporting is configured on the active MGC.
DoS attack classifications
Traffic patterns meeting the DoS attack classifications are automatically reported in MSS
notifications.
LAND_ATTACK
TCP_URGENT_ATTACK
ICMP_RATE_LIMIT
SMURF_ATTACK
Administering Avaya G430 Branch Gateway
Done!
//identify an SNMP trap recipient, activating the security notification
filter:
Gxxx-001(super)# snmp-server host 5.5.5.2 traps v3 noauth MSS security
Done!
//view the SNMP configuration
Gxxx-001(super)# show snmp
Authentication trap disabled
Community-Access Community-String
---------------- ----------------
read-only *****
read-write *****
SNMPv3 Notifications Status
-----------------------------
Traps: Enabled
Informs: Enabled Retries: 3 Timeout: 3 seconds
SNMP-Rec-Address Model Level Notification Trap/Inform User name
---------------- ----- ------- --------------- -----------
-------------------
5.5.5.2 v3 noauth all trap MSS
UDP port: 162
rate, if necessary.
The default is 300 seconds. The Branch Gateway counts events for each DoS class
for the duration of the interval. At the end of each interval, if the count of each class
of DoS events surpasses a defined threshold, the Branch Gateway generates an
MSS notification, reporting on the event type, event parameters, and the number of
occurrences. To display the current MSS reporting rate, use the show mss-
notification rate command.
For information about configuring INADS reporting in Avaya Aura
Manager, see Avaya Aura
DoS Attack
®
Communication Manager documentation.
Description
Land attack packets with the source IP the
same as an IP address
TCP packets with the URGENT option set
ICMP (echo) requests exceeding a pre-defined
rate
ICMP echo packets with limited broadcast
destination address
Special security features
®
Communication
October 2013 57