Denial Of Service (Dos) Protection - Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - SYSTEM BASICS CONFIGURATION GUIDE 2010-10-04 Configuration Manual

Denial of Service (DoS) Protection

Copyright © 2010, Juniper Networks, Inc.
Cannot access Global Configuration mode and cannot configure VRs to which they
have access.
Cannot see or use any commands associated with the file system, boot settings, or
system configuration.
The following table lists some, but not all, commands accessed from Exec mode that
are available only to users with no VR restriction:
clear line
clock set
copy
copy running-configuration
delete
dir
disconnect ssh
configure
erase secrets
halt
A denial-of-service (DoS) attack is any attempt to deny valid users access to network
or server resources by using up all the resources of the network element or server. Denial
of service protection provides reactive prevention from attack and determines whether
the source of traffic is valid or invalid. DoS protection includes diagnostic tools and
configuration options. DoS protection groups provide a simple policy that can be applied
to interfaces, which can specify a set of parameters to tune behavior.
Figure 26 on page 436 shows an example of the state of a flow with DoS protection using
suspicious control flow detection (SCFD).
reload
reload slot
rename
redundancy force-switchover
redundancy revert
show boot
show config
show exception dump
show ip ssh
show line
Chapter 7: Passwords and Security
show redundancy
show secrets
show subsystems
show timing
show users
show utilization
srp switch
synchronize
–
–
435