Denial Of Service (Dos) - TRENDnet TPE-3012LS User Manual

12-port gigabit poe+ smart surveillance switch, 18-port gigabit poe+ smart surveillance switch
Table of Contents

Advertisement

TRENDnet User's Guide
5. Click Apply.
6. In the top right, click Save to save the configuration settings to NV-RAM/startup
configuration.
7. Click OK.
© Copyright 2020 TRENDnet. All Rights Reserved.

Denial of Service (DoS)

Security > DoS
The switch has built-in DoS prevention features to restrict specific type of traffic
associated denial of service attacks on your network. By default, DoS is disabled on all
ports. For additional security, DoS can be enabled on all ports or specific ports as
needed.
1. Log into your switch management page (see
on page 11).
2. Click on Security, click on DoS, click on Property.
3. Review the settings below.
POD: Enable this option to block the ping of death DoS attacks.
Land: Enable this option to block LAND DoS attacks.
UDP Blat: Enable this option to block UDP flood DoS attacks.
TCP Blat: Enable this option to block TCP flood DoS attacks.
DMAC = SMAC: Enable this option to block traffic where the destination MAC is
same as the source MAC.
Null Scan Attack: Enable this option to block TCP port scans on the switch to
prevent discovery which ports are listening.
X-Mas Scan Attack: Enable this option to block X-Mas Scan attacks to prevent
discovery of which devices/protocols are being used via TCP/IP.
TCP SYN-FIN Attack: Enable this option to block TCP SYN-FIN DoS attacks.
TCP SYN-RST Attack: Enable this option to block TCP SYN-RST DoS attacks
ICMP Fragment: Enable this option to block ICMP fragment DoS attacks.
TCP-SYN: Enable this option to block TCP-SYN flood attacks.
TCP Fragment: Enable this option to block TCP fragment DoS attacks, also
known as teardrop.
Ping Max Size (IPv4): Enable this option to set the maximum size for ICMP ping
packets.
TCP Min Hdr Size: Enable this option to set the maximum size for TCP headers.
IPv6 Min Fragment: Enable this option to set the minimum IPv6 fragment size.
Smurf Attack: Enable this option to set the subnet mask maximum length to
prevent smurf DoS attacks.
TPE-3012LS / TPE-3018LS
"Access your switch management
page"
117

Advertisement

Table of Contents
loading

This manual is also suitable for:

Tpe-3d18ls

Table of Contents