ECS4110-28T_Management Guide

C HAPTER 25 | General Security Measures
Denial of Service Protection
– 958 –
dos-protection
echo-chargen
This command protects against DoS echo/chargen attacks in which the
echo service repeats anything sent to it, and the chargen (character
generator) service generates a continuous stream of data. When used
together, they create an infinite loop and result in a denial-of-service. Use
the no form to disable this feature.
SYNTAX
dos-protection echo-chargen [bit-rate-in-kilo rate]
no dos-protection echo-chargen
rate – Maximum allowed rate. (Range: 64-2000 kbits/second)
DEFAULT SETTING
Disabled, 1000 kbits/second
COMMAND MODE
Global Configuration
EXAMPLE
Console(config)#dos-protection echo-chargen 65
Console(config)#
dos-protection
smurf
This command protects against DoS smurf attacks in which a perpetrator
generates a large amount of spoofed ICMP Echo Request traffic to the
broadcast destination IP address (255.255.255.255), all of which uses a
spoofed source address of the intended victim. The victim should crash due
to the many interrupts required to send ICMP Echo response packets. Use
the no form to disable this feature.
SYNTAX
[no] dos-protection smurf
DEFAULT SETTING
Enabled
COMMAND MODE
Global Configuration
EXAMPLE
Console(config)#dos-protection smurf
Console(config)#