System information

Chapter 2: Configuring System Information | 47
GS752TXS Smart Switch Software Administration Manual
have a size greater than this configured Max ICMPv4 Pkt Size. Its range is (0 to 16376).
The default value is 512.
• Denial of Service ICMPv6: Enabling ICMPv6 DoS prevention causes the switch to drop
ICMPv6 packets that have a type set to ECHO_REQ (ping) and a size greater than the
configured ICMPv6 Pkt Size. The factory default is disabled.
• Denial of Service Max ICMPv6 Packet Size: Specify the Max IPv6 ICMP Pkt Size
allowed. If ICMPv6 DoS prevention is enabled, the switch will drop IPv6 ICMP ping
packets that have a size greater than this configured Max ICMPv6 Pkt Size. Its range is (0
to 16376). The default value is 512.
• Denial of Service First Fragment: Enabling First Fragment DoS prevention causes the
switch to check DoS options on first fragment IP packets when switch are receiving
fragmented IP packets. Otherwise, switch ignores the first fragment IP packages.The
factory default is disabled.
• Denial of Service ICMP Fragment: Enabling ICMP Fragment DoS prevention causes
the switch to drop ICMP Fragmented packets. The factory default is disabled.
• Denial of Service SIP=DIP: Enabling SIP=DIP DoS prevention causes the switch to drop
packets that have a source IP address equal to the destination IP address. The factory
default is disabled.
• Denial of Service SMAC=DMAC: Enabling SMAC=DMAC DoS prevention causes the
switch to drop packets that have a source MAC address equal to the destination MAC
address. The factory default is disabled.
• Denial of Service TCP FIN&URG&PSH: Enabling TCP FIN & URG & PSH DoS
prevention causes the switch to drop packets that have TCP Flags FIN, URG, and PSH
set and TCP Sequence Number=0. The factory default is disabled.
• Denial of Service TCP Flag&Sequence: Enabling TCP Flag DoS prevention causes the
switch to drop packets that have TCP control flags set to 0 and TCP sequence number
set to 0. The factory default is disabled.
• Denial of Service TCP Fragment: Enabling TCP Fragment DoS prevention causes the
switch to drop packets:
• First TCP fragments that has a TCP payload: IP_Payload_Length - IP_Header_Size <
Min_TCP_Header_Size. The factory default is disabled.
• Denial of Service TCP Offset: Enabling TCP Offset DoS prevention causes the switch to
drop packets that have a TCP header Offset=1. The factory default is disabled.
• Denial of Service TCP Port: Enabling TCP Port DoS prevention causes the switch to
drop packets that have TCP source port equal to TCP destination port. The factory
default is disabled.
• Denial of Service TCP SYN: Enabling TCP SYN DoS prevention causes the switch to
drop packets that have TCP Flags SYN set. The factory default is disabled.
• Denial of Service TCP SYN&FIN: Enabling TCP SYN & FIN DoS prevention causes the
switch to drop packets that have TCP Flags SYN and FIN set. The factory default is
disabled.
• Denial of Service UDP Port: Enabling UDP Port DoS prevention causes the switch to
drop packets that have UDP source port equal to UDP destination port. The factory
default is disabled.