ADTRAN AOS Version R10.1.0 Command Reference Manual page 940

Command Reference Guide
dos-protection
Use the dos-protection command to enable and configure the denial of service (DoS) protection feature.
Use the no form of this command to disable the DoS protection feature. Variations of this command
include:
dos-protection all
dos-protection except <id>
dos-protection max-icmpv4-payload <bytes>
dos-protection max-icmpv6-payload <bytes>
dos-protection min-tcp-header <bytes>
Syntax Description
all
except <ids>
max-icmpv4-payload <bytes>
max-icmpv6-payload <bytes>
min-tcp-header <bytes>
Default Values
By default, DoS protection in AOS is disabled.
Command History
Release 17.7
Functional Notes
The show dos-id command is used to obtain the DoS threat IDs necessary to create exceptions using the
dos-protection except <id> version of this command.
Usage Examples
The following example configures the DoS protection feature to protect against all available threats except
threat ID 40:
(config)#dos-protection except 40
60000CRG0-35E
Enables protection from all DoS attacks available in the feature.
Enables protection from all available DoS attacks except those with the
listed threat ids.
Sets the maximum ICMP payload size in bytes for IPv4 packets. Range
is 0 to 16 KB. Default is 512 bytes.
Sets the maximum ICMP payload size in bytes for IPv6 packets. Range
is 0 to 16 KB. Default is 512 bytes.
Sets the minimum TCP header size in bytes. Range is 0 to 255 bytes.
Default is 20 bytes.
Command was introduced.
Copyright © 2012 ADTRAN, Inc.
Global Configuration Mode Command Set
940