Cisco 350 Series Administration Manual page 515

17
STEP 1
STEP 2
STEP 3
STEP 4
STEP 5
STEP 1
STEP 2
STEP 3
372
To define Martian addresses:
Click Security > Denial of Service Prevention > Martian Addresses.
Select Reserved Martian Addresses and click Apply to include the reserved Martian
Addresses in the System Level Prevention list.
To add a Martian address click Add.
Enter the parameters.
• IP Version—Indicates the supported IP version. Currently, support is only offered for
IPv4.
• IP Address—Enter an IP addresses to reject. The possible values are:
- From Reserved List—Select a well-known IP address from the reserved list.
- New IP Address—Enter an IP address.
• Mask—Enter the mask of the IP address to define a range of IP addresses to reject. The
values are:
- Network Mask—Network mask in dotted decimal format.
- Prefix Length—Enter the prefix of the IP address to define the range of IP addresses
for which Denial of Service prevention is enabled.
Click Apply. The Martian addresses are written to the Running Configuration file.
SYN Filtering
The SYN Filtering page enables filtering TCP packets that contain a SYN flag, and are
destined for one or more ports.
To define a SYN filter:
Click Security > Denial of Service Prevention > SYN Filtering.
Click Add.
Enter the parameters.
• Interface—Select the interface on which the filter is defined.
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4
Security
Denial of Service Prevention