D-Link DES-1228/ME Reference Manual page 339

config dos_prevention dos_type
Purpose
Syntax
Description
Parameters
Restrictions
Example usage
To configure a land attack and blat attack prevention:
DES-1228/ME:5# config dos_prevention dos_type land_attack blat_attack state
enable action drop
Command: config dos_prevention dos_type land_attack blat_attack state enable
action drop
Success.
DES-1228/ME:5#
DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide
This command is used to discard the L3 control packets sent to CPU
from specific ports.
config dos_prevention dos_type [ {land_attack | blat_attack |
smurf_attack | tcp_null_scan | tcp_xmascan | tcp_synfin |
tcp_syn_srcport_less_1024} (1) | all] {action [ drop | mirror <port> {priority
<value 0-7> | rx_rate [ no_limit | <value 64-1024000> ] } ] | enable |
disable ] } (1)
This command is used to configure the prevention of DoS attacks, and
includes state and action. The packets matching will be used by the
hardware. For a specific type of attack, the content of the packet,
regardless of the receipt port or destination port, will be matched against
a specific pattern.
The type of DoS attack. Possible values are as follows:
land_attack
blat_attack
smurf_attack
tcp_null_scan
tcp_xmascan
tcp_synfin
tcp_syn_srcport_less_1024
state - Enable or disable DoS prevention.
By default, prevention for all types of DoS are enabled except for
tcp_syn_srcport_less_1024.
action - When enabling DoS prevention, the following actions can be
taken.
drop – Drop the attack packets.
mirror – Mirror the packet to other port for further process.
priority – Change packet priority by the Switch from 0 to 7.
If the priority is not specified, the original priority will be used.
rx_rate – controls the rate of the received DoS attack packets.
If not specified, the default action is drop.
Only Administrator level, Operator level or Power User level users can
issue this command.
335