Dos-Control Icmpv6; Dos-Control Icmpfrag; Show Dos-Control - Ubiquiti EDGESWITCH ES-24-250W Command Reference Manual

EdgeSwitch CLI Command Reference
no dos-control icmpv4
This command disables Maximum ICMP Packet Size Denial of Service protections .
no dos-control icmpv4
Format
Mode Global Config

dos-control icmpv6

This command enables Maximum ICMPv6 Packet Size Denial of Service protections . If the mode is enabled,
Denial of Service prevention is active for this type of attack . If ICMPv6 Echo Request (PING) packets ingress
having a size greater than the configured value, the packets will be dropped if the mode is enabled .
Default disabled (512)
dos-control icmpv6 0-16376
Format
Mode Global Config
no dos-control icmpv6
This command disables Maximum ICMP Packet Size Denial of Service protections .
no dos-control icmpv6
Format
Mode Global Config

dos-control icmpfrag

This command enables ICMP Fragment Denial of Service protection . If the mode is enabled, Denial of Service
prevention is active for this type of attack . If packets ingress having fragmented ICMP packets, the packets will be
dropped if the mode is enabled .
Default disabled
dos-control icmpfrag
Format
Mode Global Config
no dos-control icmpfrag
This command disabled ICMP Fragment Denial of Service protection .
no dos-control icmpfrag
Format
Mode Global Config

show dos-control

This command displays Denial of Service configuration information .
show dos-control
Format
Mode
Privileged EXEC
Note: Some of the information below is displayed only if you are using the BCM56224 and BCM5621x
platforms .
Term
First Fragment Mode
Min TCP Hdr Size
ICMPv4 Mode
Max ICMPv4 Payload Size
Ubiquiti Networks, Inc.
Definition
The administrative mode of First Fragment DoS prevention. When enabled, this causes the switch to
drop packets that have a TCP header smaller then the configured Min TCP Hdr Size.
The minimum TCP header size the switch will accept if First Fragment DoS prevention is enabled.
The administrative mode of ICMPv4 DoS prevention. When enabled, this causes the switch to drop
ICMP packets that have a type set to ECHO_REQ (ping) and a size greater than the configured ICMPv4
Payload Size.
The maximum ICMPv4 payload size to accept when ICMPv4 DoS protection is enabled.
Switching Commands
311