ECS2020 Series CLI Reference Guide R04

31
10 DDOS PROTECTION
10.1 Configuration ddos protection
Turn on DDOS protection
Enable the DDOS protection function to defend against DDOS attacks.
Dos{[land-deny | smurf-deny | nullscan-deny | xma-deny | synfin-deny | syn-sportl1024-deny | pod-deny]}
Turn off the DDOS protection function
Global configuration mode
Prevent DDOS attacks.
Turn on land-deny attack protection:
ECS2020-10P(config)# dos land-deny
Parameter
Parameter
Description
land-deny
Source IP equals the destination IP
smurf-deny
Smurf-attack messages
nullscan-deny
Null scan attacks
xma-deny
Xmascan:sequence number is zero and the FIN,
URG and PSH bits are set
synfin-deny
SYN and FIN bits set in the packet
syn-sportl1024-deny
SYN packets with port less than 1024
pod-deny
Ping of death attacks
Default
Mode
Usage
Example