Managed Security Services - Avaya G430 Manual

For more information about these commands, see
page 55 .
For more information about these commands, see the Avaya Branch Gateway G430 CLI
Reference.
SYN cookies configuration commands
For more information about these commands, see the Avaya Branch Gateway G430 CLI
Reference.
Command
clear tcp syn-
cookies counters
show tcp syn-
cookies
tcp syn-cookies

Managed Security Services

Branch Gateway IP interfaces and gateway applications such as WAN routers, PoE switches,
and VPN devices can be at risk for DoS attacks. The Branch Gateway identifies predefined or
custom-defined traffic patterns as suspected attacks and generates SNMP notifications,
referred to as Managed Security Services (MSS) notifications.
Related topics:
MSS reporting mechanism
Configuring MSS
DoS attack classifications
Custom DoS classifications
Example of configuring MSS notifications using ACL rules
MSS configuration CLI commands
MSS reporting mechanism
MSS notifications are sent to the active MGC by the dynamic trap manager. MSS notifications
sent to the active MGC by the dynamic trap manager are converted to syslog messages by
the SNMP trap manager on the MGC. For general information about configuring and enabling
Administering Avaya G430 Branch Gateway
Clear the SYN cookies counters
Show SYN cookies statistics for inbound TCP connections
Enable or disable the TCP SYN cookies defense mechanism
against SYN attacks
on page 55
on page 56
on page 57
on page 58
on page 60
Special security features
SYN cookies configuration commands
Description
on page 60
on
October 2013 55