Icmp-Ping-Flood - Alcatel-Lucent OmniAccess 700 CLI Command Reference Manual

Left running head:
Chapter name (automatic)
Filter and Firewall
- -
ICMP PING FLOOD
icmp-ping-flood [threshold <1-4294967295> <1-4294967295>]
D
ESCRIPTION
A perpetrator sends a large amount of ICMP echo (ping) traffic at IP broadcast
addresses, all of it having a spoofed source address of a victim. If the routing
device delivering traffic to the broadcast addresses, performs the IP broadcast to
another broadcast function. Most hosts on that IP network will take the ICMP echo
request and reply to it with an echo reply each, and multiply the traffic by the
number of hosts responding.To secure system from this kind of ping flooding, this
command is included in the default attack prevention list.
P
ARAMETERS
threshold
1-4294967295
1-4294967295
D V
EFAULT ALUE
•
2 packets per 10 milliseconds.
•
5000 microseconds is the default.
E
XAMPLE
ALU(config-firewall-attack-A1)# icmp-ping-flood threshold 20 7
608
Beta
Parameter
Alcatel-Lucent
Description
Threshold limit set.
Number of packets permissible within a
defined interval.
The limiting time to which the packets
can be sent.
OmniAccess 700 CLI Command Reference Guide
Beta