Cisco 500 Series Administration Manual page 468

Security
Denial of Service Prevention
STEP 1
STEP 2
STEP 3
STEP 4
STEP 5
Cisco 500 Series Stackable Managed Switch Administration Guide
- 0.0.0.0/8 (Except 0.0.0.0/32 as a Source Address)—Addresses in
this block refer to source hosts on this network.
- 127.0.0.0/8—Used as the Internet host loopback address.
- 192.0.2.0/24—Used as the TEST-NET in documentation and example
codes.
- 224.0.0.0/4 (As a Source IP Address)—Used in IPv4 Multicast address
assignments, and was formerly known as Class D Address Space.
- 240.0.0.0/4 (Except 255.255.255.255/32 as a Destination
Address)—Reserved address range, and was formerly known as Class
E Address Space.
You can also add new Martian Addresses for DoS prevention. Packets that have a
Martian addresses are discarded.
To define Martian addresses:
Click Security > Denial of Service Prevention > Martian Addresses.
Select Reserved Martian Addresses and click Apply to include the reserved
Martian Addresses in the System Level Prevention list.
To add a Martian address click Add.
Enter the parameters.
• IP Version—Indicates the supported IP version. Currently, support is only
offered for IPv4.
• IP Address—Enter an IP addresses to reject. The possible values are:
From Reserved List
-
list.
New IP Address
-
• Mask—Enter the mask of the IP address to define a range of IP addresses to
reject. The values are:
Network Mask
-
Prefix Length
-
addresses for which Denial of Service prevention is enabled.
Click Apply. The Martian addresses are written to the Running Configuration file.
—Select a well-known IP address from the reserved
—Enter an IP address.
—Network mask in dotted decimal format.
—Enter the prefix of the IP address to define the range of IP
21
466