Prevent Tcp Unauthorized Label Attack Function Configuration Task Sequence; Anti Port Cheat Function Configuration Task Sequence; Prevent Tcp Fragment Attack Function Configuration Task Sequence - Planet WGSW-52040 Configuration Manual

45.2.2 Prevent TCP Unauthorized Label Attack
Function Configuration Task Sequence
1．Enable the anti TCP unauthorized label attack function
Command
Global Mode
[no] dosattack-check tcp-flags enable
45.2.3 Anti Port Cheat Function Configuration Task
Sequence
1． Enable the anti port cheat function
Command
Global Mode
[no] dosattack-check
srcport-equal-dstport enable
45.2.4 Prevent TCP Fragment Attack Function
Configuration Task Sequence
1．Enable the prevent TCP fragment attack function
2．Configure the minimum permitted TCP head length of the packet
Command
Global Mode
[no] dosattack-check tcp-fragment
enable
dosattack-check tcp-header <size>
Note: This function is not supported by switch.
Explanation
Enable/disable checking TCP label function.
Explanation
Enable/disable the prevent-port-cheat function.
Explanation
Enable/disable the prevent TCP fragment
attack function.
Configure the minimum permitted TCP head
length of the packet. This command has no
effect when used separately, the user should
enable the dosattack-check tcp-fragment
enable.
45-169