Dell PowerConnect 8024 User Manual page 183

Denial of Service L4 Port — Enabling L4 Port DoS prevention causes the switch to drop packets that
•
have the TCP/UDP source port equal to TCP/UDP destination port.
Denial of Service ICMP — Enabling ICMP DoS prevention causes the switch to drop ICMP packets
•
that have a type set to ECHO_REQ (ping) and a size greater than the configured ICMP packet size
(ICMP Pkt Size).
Denial of Service Max ICMP Pkt Size — Specify the maximum ICMP packet size to allow. If ICMP
•
DoS prevention is enabled, the switch will drop ICMP ping packets that have a size greater then this
configured value.
Configuring Denial of Service Settings
1. Open the Denial of Service page.
2. Specify the desired settings.
3. Click Apply Changes.
The device is updated with the new settings.
Configuring Denial of Service Settings Using CLI Commands
For information about the CLI commands that perform this function, see the Denial of Service
Commands chapter in the
commands you use to configure Denial of Service.
Table 6-38. Denial of Service Configuration Commands
CLI Command
dos-control firstfrag
dos-control icmp
dos-control l4port
dos-control sipdip
dos-control tcpflag
dos-control tcpfrag
ip icmp echo-reply
ip icmp error-interval
ip icmp unreachables
ip icmp redirects
ipv6 icmp error-internal
ipv6 unreachables
show dos-control
CLI Reference Guide
. The following table summarizes the equivalent CLI
Description
Enables Minimum TCP Header Size Denial of Service protection.
Enables Maximum ICMP Packet Size Denial of Service protections.
Enables L4 Port Denial of Service protection.
Enables Source IP Address = Destination IP Address (SIP=DIP)
Denial of Service protection.
Enables TCP Flag Denial of Service protections.
Enables TCP Fragment Denial of Service protection.
Enables or disables the generation of ICMP Echo Reply messages.
Limits the rate at which IPv4 ICMP error messages are sent.
Enables the generation of ICMP Destination Unreachable messages.
Enables the generation of ICMP Redirect messages.
Limits the rate at which ICMPv6 error messages are sent.
Enables the generation of ICMPv6 Destination Unreachable messages.
Displays Denial of Service configuration information.
Configuring System Information
183