Configuring Ip Defense; Denial Of Service (Dos) Prevention; Ping Limit - Multitech MultiConnect rCell 100 User Manual

CHAPTER 12 DEVICE ADMINISTRATION
Field
Enabled
Per Second
Burst
Brute Force Protection
This feature tracks login attempts at the RESTFUL API level. Its purpose is to prevent Dictionary attacks that
attempt to brute force the user's password.
Field
Enabled
Attempts
Lockout Minutes
After making all your desired changes, click Submit, then click Save and Restart.

Configuring IP Defense

You can configure your router to slow malicious actions against it.

Denial of Service (DOS) Prevention

To mitigate the effects of a denial of service attack:
1. Go to Administration > Access Configuration.
2. Check Enabled to enable the DoS prevention.
3. In the Per Minute field, type the average number of pings per minute. This is the number of new
connections per minute until burst points are consumed. For example, if 60 new connections are received
in a minute, decrement one burst point. If no more burst points occur, drop the packet.
4. In the Burst field, type the allowed burst for traffic spikes. A burst occurs when the Per Minute limit is
reached. On a period where the Per Minute limit is not reached, one burst point is regained, up to the
maximum.
5. Select Submit to save changes.
6. To save your changes, click Save & Restart.

Ping limit

This engages a set of rules at the firewall that aims to prevent Ping Flood attacks by limiting the number of ICMP
requests to the router. This does not apply if ICMP is disabled. To mitigate the effects of a ping DoS on your router:
1. Check Enabled to enable the Ping Limit feature.
64
Description
Enables the Ping Limit feature.
Allowed number of pings per second before burst
points are consumed. Once burst points run out, ICMP
packets will be dropped.
Number of burst points. On a period where the Per
Second limit is not reached, one burst point is regained,
up to this maximum.
Description
Enables the Brute Force Prevention feature.
The number of failed attempts allowed before the
user's account is locked out.
The number of minutes an account is locked out before
a new login attempt will be accepted.
MultiConnect
®
rCell 100 MTR-H5 User Guide