H3C MSR Series Command Reference Manual page 1100
Comware 7 security
Hide thumbs
Also See for MSR Series:
- Command reference manual (174 pages) ,
- Configuration manual (80 pages) ,
- Manual (33 pages)
Table of Contents
Advertisement
signature detect ipv6-ext-header ext-header-value [ action { { drop | logging } * | none } ]
undo signature detect ipv6-ext-header next-header-value
Default
Signature detection is disabled for all single-packet attacks.
Views
Attack defense policy view
Predefined user roles
network-admin
Parameters
fraggle: Specifies the fraggle attack.
fragment: Specifies the IP fragment attack.
icmp-type: Specifies an ICMP packet attack by the packet type. You can specify the packet type by
a number or a keyword:
•
icmp-type-value: Specifies the ICMP packet type in the range of 0 to 255.
•
address-mask-reply: Specifies the ICMP address mask reply type.
•
address-mask-request: Specifies the ICMP address mask request type.
•
destination-unreachable: Specifies the ICMP destination unreachable type.
•
echo-reply: Specifies the ICMP echo reply type.
•
echo-request: Specifies the ICMP echo request type.
•
information-reply: Specifies the ICMP information reply type.
•
information-request: Specifies the ICMP information request type.
•
parameter-problem: Specifies the ICMP parameter problem type.
•
redirect: Specifies the ICMP redirect type.
•
source-quench: Specifies the ICMP source quench type.
•
time-exceeded: Specifies the ICMP time exceeded type.
•
timestamp-reply: Specifies the ICMP timestamp reply type.
•
timestamp-request: Specifies the ICMP timestamp request type.
icmpv6-type: Specifies an ICMPv6 packet attack by the packet type. You can specify the packet
type by a number or a keyword.
•
icmpv6-type-value: Specifies the ICMPv6 packet type in the range of 0 to 255.
•
destination-unreachable: Specifies the ICMPv6 destination unreachable type.
•
echo-reply: Specifies the ICMPv6 echo reply type.
•
echo-request: Specifies the ICMPv6 echo request type.
•
group-query: Specifies the ICMPv6 group query type.
•
group-reduction: Specifies the ICMPv6 group reduction type.
•
group-report: Specifies the ICMPv6 group report type.
•
packet-too-big: Specifies the ICMPv6 packet too big type.
•
parameter-problem: Specifies the ICMPv6 parameter problem type.
•
time-exceeded: Specifies the ICMPv6 time exceeded type.
impossible: Specifies the IP impossible packet attack.
ip-option: Specifies an IP option. You can specify the IP option by a number or a keyword:
1077
Advertisement
Table of Contents
