Table 64: Dos Protection Commands - Edge-Core ECS4620-28P Cli Reference Manual

Denial of Service Protection
Command Usage
Enter this command to display the configuration settings for all VLANs, or display
the settings for a specific VLAN by entering the VLAN identifier.
Example
Console#show ip arp inspection vlan 1
VLAN ID DAI Status
-------- ---------------
1 disabled
Console#
A denial-of-service attack (DoS attack) is an attempt to block the services provided
by a computer or network resource. This kind of attack tries to prevent an Internet
site or service from functioning efficiently or at all. In general, DoS attacks are
implemented by either forcing the target to reset, to consume most of its resources
so that it can no longer provide its intended service, or to obstruct the
communication media between the intended users and the target so that they can
no longer communicate adequately.
This section describes commands used to protect against DoS attacks.

Table 64: DoS Protection Commands

Command
dos-protection echo-chargen
dos-protection smurf
dos-protection tcp-flooding
dos-protection tcp-null-scan
dos-protection tcp-syn-fin-scan
dos-protection tcp-udp-port-zero
dos-protection tcp-xmas-scan
dos-protection udp-flooding
dos-protection win-nuke
show dos-protection
Chapter 9
ACL Name
--------------------
sales
Function
Protects against DoS echo/chargen attacks
Protects against DoS smurf attacks
Protects against DoS TCP-flooding attacks
Protects against DoS TCP-null-scan attacks
Protects against DoS TCP-SYN/FIN-scan attacks
Protects against attacks which set the Layer 4 source
or destination port to zero
Protects against DoS TCP-XMAS-scan attacks
Protects against DoS UDP-flooding attacks
Protects against DoS WinNuke attacks
Shows the configuration settings for DoS protection PE
– 383 –
| General Security Measures
Denial of Service Protection
ACL Status
--------------------
static
Mode
GC
GC
GC
GC
GC
GC
GC
GC
GC