System information

Overview 67
9
Denial of Service Attack Protection
This section describes the D-Link DWS-3000 switch’s Denial of Service Protection feature.
Overview
Denial of Service:
• Spans two categories:
- Protection of the Unified Switch
- Protection of the network
• Protects against the exploitation of a number of vulnerabilities which would make the host
or network unstable
• Compliant with Nessus. Nessus is a widely-used vulnerability assessment tool.
• The Unified Switch provides a number of features that help a network administrator pro-
tect networks against DoS attacks.
CLI Examples
Enter from Global Config mode:
(DWS-3024) #configure
(DWS-3024) (Config)#dos-control sipdip
(DWS-3024) (Config)#dos-control firstfrag
(DWS-3024) (Config)#dos-control tcpfrag
(DWS-3024) (Config)#dos-control l4port
(DWS-3024) (Config)#dos-control icmp
(DWS-3024) (Config)#exit
(DWS-3024) #show dos-control
SIPDIP Mode.................................... Enable