D-Link DWS-4000 Series Cli Command Reference page 159

This command enables TCP Offset Denial of Service protection. If the mode is enabled, Denial of Service prevention is active
for this type of attack. If packets ingress having TCP Header Offset equal to one (1), the packets will be dropped if the mode
is enabled.
Default disabled
Format
dos-control tcpoffset
Mode Global Config
no dos-control tcpoffset
This command disabled TCP Offset Denial of Service protection.
Format
no dos-control tcpoffset
Mode Global Config
dos-control tcpsyn
Note: This command is only supported on the BCM56224, BCM56514, BCM56624, and BCM56820platforms.
This command enables TCP SYN and L4 source = 0-1023 Denial of Service protection. If the mode is enabled, Denial of
Service prevention is active for this type of attack. If packets ingress having TCP flag SYN set and an L4 source port from 0
to 1023, the packets will be dropped if the mode is enabled.
Default disabled
Format
dos-control tcpsyn
Mode Global Config
no dos-control tcpsyn
This command sets disables TCP SYN and L4 source = 0-1023 Denial of Service protection.
Format
no dos-control tcpsyn
Mode Global Config
dos-control tcpsynfin
Note: This command is only supported on the BCM56224, BCM56514, BCM56624, and BCM56820platforms.
This command enables TCP SYN and FIN Denial of Service protection. If the mode is enabled, Denial of Service prevention
is active for this type of attack. If packets ingress having TCP flags SYN and FIN set, the packets will be dropped if the mode
is enabled.
Default disabled
Format
dos-control tcpsynfin
Mode Global Config
Denial of Service Commands
151