User's Manual
366
Configures
mac
to prevent those packets whose
source MACs are destination MACs.
Configures
tcpflags
to prevent those TCP packets
containing illegal TCP flags.
Configures
tcpfrag
to prevent those TCP packets
whose minimum TCP header is
tcpfrag-value
.
exit
Goes back to the EXEC mode.
write
Saves the settings.
47.4.2 Displaying All DoS Attack Prevention Configurations
You can display the Dos attack prevention configurations through the show command.
Run the following command in EXEC mode to display the configured DoS attack prevention functions.
Command Purpose
show dos
Displays Dos attack prevention configuration.
47.5 DoS Attack Prevention Configuration Example
The following example shows how to configure to prevent the attacks of TCP packets, which have illegal flags,
and then displays user’s configuration.
config
dos enable tcpflags
show dos
The following example shows how to prevent the attacks of IP packets whose source IPs are destination IPs
in global mode.
config
dos enable ip
The following example shows how to prevent in global mode the attacks of ICMP packets whose maximum
length is more than 255.
config
dos enable icmp 255