Fujitsu PRIMERGY BX900 User Manual page 734

10.16.8.6 dos-control sipdip
This command enables Source IP address = Destination IP address (SIP=DIP) Denial of Service
protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets
ingress with SIP=DIP, the packets will be dropped if the mode is enabled.
Syntax
dos-control sipdip
no dos-control sipdip
no -
This command disables Source IP address = Destination IP address (SIP=DIP) Denial of Service prevention.
Default Setting
Disabled
Command Mode
Global Config
10.16.8.7 dos-control tcpflag
This command enables TCP Flag Denial of Service protections. If the mode is enabled, Denial of Service
prevention is active for this type of attacks. If packets ingress having TCP Flag SYN set and a source port
less than 1024 or having TCP Control Flags set to 0 and TCP Sequence Number set to 0 or having TCP
Flags FIN, URG, and PSH set and TCP Sequence Number set to 0 or having TCP Flags SYN and FIN
both set, the packets will be dropped if the mode is enabled.
Syntax
dos-control tcpflag
no dos-control tcpflag
no -
This command sets disables TCP Flag Denial of Service protections.
Default Setting
Disabled
Command Mode
Global Config
2011 Fujitsu Technology Solutions
©
732