Cisco 300 Series Cli Manual page 366

Denial of Service (DoS) Commands
OL-32830-01 Command Line Interface Reference Guide
/prefix-length}} | remove {ip-address {mask | /prefix-length}},
entries added by the user. The user can remove a specific entry by using remove
ip-address {mask | /prefix-length}
There is no no form of the security-suite deny martian-addresses
remove} command. Use instead the security-suite deny martian-addresses
remove
reserved command to remove protection (and free up hardware
resources).
Parameters
•
reserved add/remove—Add or remove the table of reserved addresses
below.
•
ip-address—Adds/discards packets with the specified IP source or
destination address.
•
mask—Specifies the network mask of the IP address.
•
prefix-length—Specifies the number of bits that comprise the IP address
prefix. The prefix length must be preceded by a forward slash (/).
•
reserved—Discards packets with the source or destination IP address in
the block of the reserved (Martian) IP addresses. See the User Guidelines
for a list of reserved addresses.
Default Configuration
Martian addresses are allowed.
Command Mode
Global Configuration mode
User Guidelines
For this command to work,
globally.
parameter.
show security-suite configuration
16
and removes all
reserved {add |
must be enabled
366