Radware Alteon Application Manual page 625

ID SLB String
8
BINMATCH=014F, offset=2, depth=0, op=eq, cont 256
9
STRMATCH=/default.htm offset=44, depth=30, op=eq, cont 256
10
BINMATCH=0000, offset=6, depth=0, op=gt, cont 256
11
BINMATCH=4000, offset=6, depth=0, op=lt, cont 256
5. In the Security menu, configure a pattern group and name it something relevant and easy to
remember.
>> /cfg/security/pgroup 2/name
Current pattern group name:
Enter new pattern group name: pingofdeath
6. Add the defined patterns to the pattern group.
>> Pattern Match Group 2# add 10
>> Pattern Match Group 2# add 11
7. Configure a filter and its appropriate protocol in which the patterns are found. In this case, the
ICMP protocol should be specified.
>> /cfg/slb/filt 190
>> Filter 190 # proto icmp
8. Set the filter action to deny.
>> Filter 190 # action deny
Current action: none
Pending new action:
9. Set the ICMP message type. Ping of Death uses the ICMP message type echoreq.
>> Filter 190 # adv/icmp
>> Filter 190 Advanced# icmp
Current ICMP message type:
Enter ICMP message type or any: echoreq
10. Apply the pattern group you configured in
>> Filter 190 # security/addgrp 2
Group ID 2 added.
11. Enable pattern matching on the filter.
>> /cfg/slb/filt 190/adv/security/pmatch enable
Current Pattern Match: disabled
New Pattern Match:
Document ID: RDWR-ALOS-V2900_AG1302
Alteon Application Switch Operating System Application Guide
deny
any
step 5
enabled
Advanced Denial of Service Protection
and step 6 to the filter.
625