Trusted Host Settings - D-Link xStack DGS-3120 Series Reference Manual

xStack® DGS-3120 Series Layer 3 Managed Gigabit Ethernet Switch Web UI Reference Guide
Parameter
Land Attack
Blat Attack
TCP Tiny Frag Attack
TCP Null Scan
TCP Xmascan
TCP SYNFIN
TCP SYN Src Port Less
1024
Ping Death Attack
All
State
Action
DoS Trap State
DoS Log State
Click the Apply button to accept the changes made for each individual section.
Click the View Detail link to view more information regarding the specific entry.
After clicking the View Detail

Trusted Host Settings

Up to thirty trusted host secure IP addresses or ranges may be configured and used for remote Switch
management. It should be noted that if one or more trusted hosts are enabled, the Switch will immediately accept
remote instructions from only the specified IP address or addresses. If you enable this feature, be sure to first enter
the IP address of the station you are currently using.
To view this window, click Security > Trusted Host Settings as shown below:
Description
Tick to check whether the source address is equal to destination address of a
received IP packet.
Tick check whether the source port is equal to destination port of a received TCP
packet.
Tick to check whether the packets are TCP tiny fragment packets.
Tick to check whether a received TCP packet contains a sequence number of 0 and
no flags
Tick to check whether a received TCP packet contains URG, Push and FIN flags.
Tick to check whether a received TCP packet contains FIN and SYN flags.
Tick to check whether the TCP packets source ports are less than 1024 packets.
Tick to detect whether received packets are fragmented ICMP packets.
Tick to select all DoS attack types.
Select to enable or disable DoS attack prevention.
Select the action to be taken when detecting the attack.
Select to enable or disable DoS prevention trap state.
Select to enable or disable DoS prevention log state.
link, the following page will appear:
Figure 8-90 DoS Attack Prevention Detail - View Detail window
394