Denial Of Service Protection; Table 99: Dos Protection Commands - Edge-Core ECS4810-12M Layer 2 Management Manual

D S
ENIAL OF ERVICE
C U
OMMAND SAGE
Enter this command to display the configuration settings for all VLANs, or
display the settings for a specific VLAN by entering the VLAN identifier.
E
XAMPLE
Console#show ip arp inspection vlan 1
VLAN ID DAI Status
-------- ---------------
1 disabled
Console#
P
ROTECTION
A denial-of-service attack (DoS attack) is an attempt to block the services
provided by a computer or network resource. This kind of attack tries to
prevent an Internet site or service from functioning efficiently or at all. In
general, DoS attacks are implemented by either forcing the target to reset,
to consume most of its resources so that it can no longer provide its
intended service, or to obstruct the communication media between the
intended users and the target so that they can no longer communicate
adequately.
This section describes commands used to protect against DoS attacks.

Table 99: DoS Protection Commands

Command
dos-protection echo-chargen
dos-protection smurf
dos-protection tcp-flooding
dos-protection tcp-null-scan
dos-protection tcp-syn-fin-scan
dos-protection tcp-udp-port-zero
dos-protection tcp-xmas-scan
dos-protection udp-flooding
dos-protection win-nuke
show dos-protection
– 913 –
| General Security Measures
C 25
HAPTER

Denial of Service Protection

ACL Name
--------------------
sales
Function
Protects against DoS echo/chargen attacks
Protects against DoS smurf attacks
Protects against DoS TCP-flooding attacks
Protects against DoS TCP-null-scan attacks
Protects against DoS TCP-SYN/FIN-scan attacks GC
Protects against attacks which set the Layer 4
source or destination port to zero
Protects against DoS TCP-XMAS-scan attacks
Protects against DoS UDP-flooding attacks
Protects against DoS WinNuke attacks
Shows the configuration settings for DoS
protection
ACL Status
--------------------
static
Mode
GC
GC
GC
GC
GC
GC
GC
GC
PE