Dos-Control Udpport; Dos-Control Tcpflagseq; Dos-Control Tcpoffset - Ubiquiti EDGESWITCH ES-24-250W Command Reference Manual

EdgeSwitch CLI Command Reference

dos-control udpport

This command enables UDP L4 source = destination port number (Source UDP Port = Destination UDP Port) DoS
protection . If the mode is enabled, Denial of Service prevention is active for this type of attack . If packets ingress
with Source UDP Port = Destination UDP Port, the packets will be dropped if the mode is enabled .
Default disabled
dos-control udpport
Format
Mode Global Config
no dos-control udpport
This command disables UDP L4 source = destination port number (Source UDP Port = Destination UDP Port)
Denial of Service protection .
no dos-control udpport
Format
Mode Global Config

dos-control tcpflagseq

This command enables TCP Flag and Sequence Denial of Service protections . If the mode is enabled, Denial of
Service prevention is active for this type of attack . If packets ingress having TCP Flag SYN set and a source port
less than 1024 or having TCP Control Flags set to 0 and TCP Sequence Number set to 0 or having TCP Flags FIN,
URG, and PSH set and TCP Sequence Number set to 0 or having TCP Flags SYN and FIN both set, the packets will
be dropped if the mode is enabled .
Default disabled
dos-control tcpflagseq
Format
Mode Global Config
no dos-control tcpflagseq
This command sets disables TCP Flag and Sequence Denial of Service protection .
no dos-control tcpflagseq
Format
Mode Global Config

dos-control tcpoffset

This command enables TCP Offset Denial of Service protection . If the mode is enabled, Denial of Service
prevention is active for this type of attack . If packets ingress having TCP Header Offset equal to one (1), the
packets will be dropped if the mode is enabled .
Default
disabled
dos-control tcpoffset
Format
Mode Global Config
no dos-control tcpoffset
This command disabled TCP Offset Denial of Service protection .
no dos-control tcpoffset
Format
Mode Global Config
Ubiquiti Networks, Inc.
Switching Commands
309