Dos-Control L4Port; Dos-Control Icmp - NETGEAR ProSafe M7100-24X User Manual

Format
dos-control tcpflag
Mode
Global Config
no dos-control tcpflag
This command sets disables TCP Flag Denial of Service protections.
Format
no dos-control tcpflag
Mode
Global Config

dos-control l4port

This command enables L4 Port Denial of Service protections. If the mode is enabled, Denial
of Service prevention is active for this type of attack. If packets ingress having Source
TCP/UDP Port Number equal to Destination TCP/UDP Port Number, the packets will be
dropped if the mode is enabled.
Note: Some applications mirror source and destination L4 ports - RIP for
example uses 520 for both. If you enable dos-control l4port,
applications such as RIP may experience packet loss which would
render the application inoperable.
Default
disabled
Format
dos-control l4port
Mode
Global Config
no dos-control l4port
This command disables L4 Port Denial of Service protections.
Format
no dos-control l4port
Mode
Global Config

dos-control icmp

This command enables Maximum ICMP Packet Size Denial of Service protections. If the
mode is enabled, Denial of Service prevention is active for this type of attack. If ICMP Echo
ProSafe Managed Switch
Switching Commands
193