Dos-Control Tcpflag - Dell PowerConnect 8024 Cli Reference Manual

Command Mode
Global Configuration mode
User Guidelines
This command has no user guidelines.
Example
The following example activates SIP=DIP Denial of Service protection.
console(config)#dos-control sipdip

dos-control tcpflag

Use the dos-control tcpflag command in Global Configuration mode to enable TCP Flag
Denial of Service protections. If the mode is enabled, Denial of Service prevention is active for
this type of attack. If packets ingress having TCP Flag SYN set and a source port less than 1024,
having TCP Control Flags set to 0 and TCP Sequence Number set to 0, having TCP Flags FIN,
URG, and PSH set and TCP Sequence Number set to 0, or having TCP Flags SYN and FIN
both set, the packets are dropped.
Syntax
dos-control tcpflag
no dos-control tcpflag
Default Configuration
Denial of Service is disabled.
Command Mode
Global Configuration mode.
User Guidelines
This command has no user guidelines.
Example
The following example activates TCP Flag Denial of Service protections.
console(config)#dos-control tcpflag
946
Denial of Service Commands