Cisco 350 Series Administration Manual page 518

Security
Denial of Service Prevention
STEP 1
STEP 2
STEP 3
STEP 4
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4
To configure fragmented IP blocking:
Click Security > Denial of Service Prevention > IP Fragments Filtering.
Click Add.
Enter the parameters.
• Interface—Select the interface on which the IP fragmentation is being defined.
• IP Address—Enter an IP network from which the fragmented IP packets is filtered or
select All Addresses to block IP fragmented packets from all addresses. If you enter the
IP address, enter either the mask or prefix length.
• Network Mask—Select the format for the subnet mask for the source IP address, and
enter a value in one of the field:
- Mask—Select the subnet to which the source IP address belongs and enter the
subnet mask in dotted decimal format.
- Prefix Length—Select the Prefix Length and enter the number of bits that comprise
the source IP address prefix.
Click Apply. The IP fragmentation is defined, and the Running Configuration file is updated.
17
375