LevelOne FBR-2000 User Manual page 38

the network/Multi-Homing Gateway.
【SYN Flood Threshold( Per Source IP) Pkts/Sec】: T
Administrator can enter the maximum number of SYN packets per second
from attacking source IP Address that is allow to enter the
network/Multi-Homing Gateway.
【SYN Flood Threshold Blocking Time ( Per Source IP) Seconds】: T
System Administrator can enter the blocking time when the number of SYN
packets per second from attacking source IP Address that is allow to enter
the network/Multi-Homing Gateway exceed the maximum number (define as
above). After blocking for certain seconds, the device will start to calculate
the max number of SYN packets per second from attacking source IP
Address, if the max number still exceed the define value, it will block the
attacking IP Address continuously.
 Detect ICMP Attack: Select this option to detect ICMP flood attacks. When
hackers continuously send PING packets to all the machines of the LAN
networks or to the Multi-Homing Gateway via broadcasting, your network is
experiencing an ICMP flood attack.
【ICMP Flood Threshold( Total) Pkts/Sec】: T
enter the maximum number of ICMP packets per second that is allow to
enter the network/Multi-Homing Gateway.
【ICMP Flood Threshold( Per Source IP) Pkts/Sec】: T
Administrator can enter the maximum number of ICMP packets per second
from attacking source IP Address that is allow to enter the network /
Multi-Homing Gateway.
【ICMP Flood Threshold Blocking Time ( Per Source IP) Seconds】: T
System Administrator can enter the blocking time when the number of ICMP
packets per second from attacking source IP Address that is allow to enter
the network / Multi-Homing Gateway exceed the maximum number (define
as above). After blocking for certain seconds, the device will start to
calculate the max number of ICMP packets per second from attacking
source IP Address, if the max number still exceed the define value, it will
block the attacking IP Address continuously.
- 31 -
he System
he System Administrator can
he System
he
he