Icmp-Ping-Of-Death; Icmp-Redirect - Alcatel-Lucent OmniAccess 700 CLI Command Reference Manual

- - -
ICMP PING OF DEATH
icmp-ping-of-death [{max-frag-num|max-total-length} <1-
4294967295>]
D
ESCRIPTION
The TCP/IP specification requires a specific packet size for datagram
transmission. Many ping implementations allow you to specify a larger packet size
if desired. A grossly oversized ICMP packet can trigger a range of adverse system
reactions such as denial of service (DoS), crashing, freezing, and rebooting. This
command is also placed in the DoS attack prevention list to secure the system
from this attack.
P
ARAMETERS
max-frag-num <1-4294967295>
max-total-length <1-
4294967295>
D V
EFAULT ALUE
•
Number of the maximum fragments allowed in one ping packet, default value is 50
•
Number of maximum length of the whole ping packet total, default value is 65507
E
XAMPLE
ALU(config-firewall-attack-A1)# icmp-ping-of-death max-frag-num
100
-
ICMP REDIRECT

icmp-redirect

D
ESCRIPTION
This command is not a default DoS setting. The square brackets around the
whole command denotes its only optional. However the above command can be
included in the DoS prevention list to avoid this kind of attacks.
P
ARAMETERS
None.
E
XAMPLE
ALU(config-firewall-attack-A1)# icmp-redirect
OmniAccess 700 CLI Command Reference Guide
Beta
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
Parameter
Alcatel-Lucent
Description
Number of the maximum fragments
allowed in one ping packet.
Number of maximum length of the whole
ping packet total.
Beta

icmp-ping-of-death

609