SGS-6341-Series User Manual

45.2.3 Anti Port Cheat Function Configuration Task
Sequence
1． Enable the anti port cheat function
Command Explanation
Global Mode
[no] dosattack-check
srcport-equal-dstport enable
Enable/disable the prevent-port-cheat function.
45.2.4 Prevent TCP Fragment Attack Function
Configuration Task Sequence
1．Enable the prevent TCP fragment attack function
2．Configure the minimum permitted TCP head length of the packet
Command Explanation
Global Mode
[no] dosattack-check tcp-fragment
enable
Enable/disable the prevent TCP fragment
attack function.
dosattack-check tcp-header <size>
Configure the minimum permitted TCP head
length of the packet. This command has no
effect when used separately, the user should
enable the dosattack-check tcp-fragment
enable.
Note: This function is not supported by switch.
45.2.5 Prevent ICMP Fragment Attack Function
Configuration Task Sequence
1. Enable the prevent ICMP fragment attack function
2. Configure the max. permitted ICMPv4 net load length
Command Explanation
Global Mode
[no] dosattack-check icmp-attacking
enable
Enable/disable the prevent ICMP fragment
attack function.
45-104
User’s Manual of SGS-6341 series