User Manual

Managing Device Security
423
M6100 Web Management User Guide
1. Use Denial of Service Min TCP Header Size to specify the Min TCP Hdr Size allowed.
If DoS TCP Fragment is enabled, the switch will drop these packets:
• First
TCP fragments that has a TCP payload: IP_Payload_Length - IP_Header_Size
< Min_TCP_Header_Size.
• Its range is (0 to 255).
The default value is 20.
2. Use Denial of Service ICMPv4 to enable ICMPv4 DoS prevention which causes the switch
to drop ICMPv4 packets that have a type set to ECHO_REQ (ping) and a size greater than
the configured ICMPv4 Pkt Size.
The factory default is disabled.
3. Use Denial of Service Max ICMPv4 Packet Size to specify the Max ICMPv4 Pkt Size
allowed. If ICMPv4 DoS prevention is enabled, the switch will drop IPv4 ICMP ping packets
that have a size greater than this configured Max ICMPv4 Pkt Size. Its range is (0 to 16376).
The default value is 512.
4. Use Denial of Service ICMPv6 to enable ICMPv6 DoS prevention which causes the switch
to drop ICMPv6 packets that have a type set to ECHO_REQ (ping) and a size greater than
the configured ICMPv6 Pkt Size.
The factory default is disabled.
5. Use Denial of Service Max ICMPv6 Packet Size to specify the Max IPv6 ICMP Pkt Size
allowed. If ICMPv6 DoS prevention is enabled, the switch will drop IPv6 ICMP ping packets
that have a size greater than this configured Max ICMPv6 Pkt Size. Its range is (0 to 16376).
The default value is 512.