System information

Chapter 2: Configuring System Information | 49
GS752TXS Smart Switch Software Administration Manual
To configure individual DoS settings:
1. Select the types of DoS attacks for the switch to monitor and block and configure any
associated values, as the following list describes.
• Denial of Service Min TCP Header Size: Specify the Min TCP Hdr Size allowed. If
DoS TCP Fragment is enabled, the switch will drop these packets:
• First TCP fragments that has a TCP payload: IP_Payload_Length -
IP_Header_Size < Min_TCP_Header_Size. Its range is (0 to 255). The default
value is 20.
• Denial of Service ICMPv4: Enabling ICMPv4 DoS prevention causes the switch to
drop ICMPv4 packets that have a type set to ECHO_REQ (ping) and a size greater
than the configured ICMPv4 Pkt Size. The factory default is disabled.
• Denial of Service Max ICMPv4 Packet Size: Specify the Max ICMPv4 Pkt Size
allowed. If ICMPv4 DoS prevention is enabled, the switch will drop IPv4 ICMP ping
packets that have a size greater than this configured Max ICMPv4 Pkt Size. Its range
is (0 to 16376). The default value is 512.
• Denial of Service ICMPv6: Enabling ICMPv6 DoS prevention causes the switch to
drop ICMPv6 packets that have a type set to ECHO_REQ (ping) and a size greater
than the configured ICMPv6 Pkt Size. The factory default is disabled.
• Denial of Service Max ICMPv6 Packet Size: Specify the Max IPv6 ICMP Pkt Size
allowed. If ICMPv6 DoS prevention is enabled, the switch will drop IPv6 ICMP ping
packets that have a size greater than this configured Max ICMPv6 Pkt Size. Its range
is (0 to 16376). The default value is 512.
• Denial of Service First Fragment: Enabling First Fragment DoS prevention causes
the switch to check DoS options on first fragment IP packets when switch are