Dos Quick Start; Table 5-2 Denial Of Service Configuration Quick Start - Cisco 11503 - CSS Content Services Switch Administration Manual

Chapter 5 Configuring Simple Network Management Protocol (SNMP)

DoS Quick Start

OL-5647-02
Table 5-2 provides a quick overview of the steps required to configure special
enterprise traps to notify the trap host of DoS attacks on your system. Each step
includes the CLI command required to complete the task. For a complete
description of each feature and all the options associated with the CLI command,
see the sections following
Table 5-2 Denial of Service Configuration Quick Start
Task and Command Example
Enable enterprise traps if not already enabled.
1.
(config)# snmp trap-type enterprise
Set the trap threshold to notify the trap host of DoS attacks with illegal
2.
addresses, either source or destination.
(config)# snmp trap-type enterprise dos-illegal-attack
trap-threshold 1
Set the trap threshold to notify the trap host of DoS LAND attacks.
3.
(config)# snmp trap-type enterprise dos-land-attack
trap-threshold 1
4. Set the trap threshold to notify the trap host of DoS smurf attacks.
(config)# snmp trap-type enterprise dos-smurf-attack
trap-threshold 1
Set the trap threshold to notify the trap host of DoS SYN attacks.
5.
(config)# snmp trap-type enterprise dos-syn-attack trap-threshold
10
Display information about DoS attacks.
6.
(config)# show dos summary
(config)# show dos
Reset the DoS statistics for a CSS to zero, as required.
7.
(config)# zero dos statistics
Table 5-2.
Cisco Content Services Switch Administration Guide
Configuring Denial of Service (DoS)
5-23