Reference Guide

Command Groups 153
Denial of Service
Line
Command Description Mode
a
a. For the meaning of each Mode abbreviation, see
Mode Types
on page 81.
dos-control firstfrag
Enables Minimum TCP Header Size Denial of
Service protection.
GC
dos-control icmp
Enables Maximum ICMP Packet Size Denial of
Service protections.
GC
dos-control l4port
Enables L4 Port Denial of Service protection. GC
dos-control sipdip
Enables Source IP Address = Destination IP
Address (SIP=DIP) Denial of Service protection.
GC
dos-control tcpflag
Enables TCP Flag Denial of Service protections. GC
dos-control tcpfrag
Enables TCP Fragment Denial of Service
protection.
GC
ip icmp echo-reply
Enables or disables the generation of ICMP Echo
Reply messages.
GC
ip icmp error-interval
Limits the rate at which IPv4 ICMP error
messages are sent.
GC
ip unreachables
Enables the generation of ICMP Destination
Unreachable messages.
IC
ip redirects
Enables the generation of ICMP Redirect
messages.
IC
ipv6 icmp error-interval
Limits the rate at which ICMPv6 error messages
are sent.
GC
ipv6 unreachables
Enables the generation of ICMPv6 Destination
Unreachable messages.
IC
show dos-control
Displays Denial of Service configuration
information.
PE
Command Description Mode
a
exec-timeout
Configures the interval that the system waits for
user input.
LC
2CSPC4.XModular-SWUM204.book Page 153 Friday, March 15, 2013 9:24 AM