D-Link DWS-4026 Руководство пользователя. Версия 2.0 онлайн [85/741] 172936

D-Link DWS-4026 Руководство пользователя. Версия 2.0 онлайн [85/741] 172936
DenialofServiceProtection
D-Link UnifiedWiredandWirelessAccessSystem
November2011 Page85
DLinkUWSUserManual
•IfyouchangeanyoftheDoSsettings,clickSubmittoapplythechangestotheswitch.Topreservethe
changesacrossaswitchreboot,youmustperformasave.
Table17:DenialofServiceConfigurationFields
Field Description
DenialofServiceFirst
Fragment
Enableordisablethisoptionbyselectingthecorrespondinglineonthe
pulldownentryfield.EnablingFirstFr agmentDoSpreventioncausesthe
switchtodroppacketsthathaveaTCPheadersmallerthentheconfiguredMin
TCPHdrSize.Thefactorydefaultisdisabled.
DenialofServiceMinTCPHd
r
Size
SpecifytheMinTCPHdrSizeallowed.IfFirstFragmentDoSpreventionis
enabled,theswitchwill droppacketsthathavea TCPheadersmallerthenthis
configuredMinTCPHdrSize.Thefactorydefaultisdisabled.
DenialofServiceICMP Enableordisablethisoptionbyselectingthec
orrespondinglineonthe
pulldownentryfield.EnablingICMPDoSpreventioncausestheswitchtodrop
ICMPpacketsthathaveatypesettoECHO_REQ(ping)andasizegreaterthan
theconfiguredICMPPktSize.Thefactorydefaultisdisabled.
DenialofServiceMaxICMP
Size
SpecifytheMaxICMPPk
tSizeallowed.IfICMPDoSpreventionisenabled,the
switchwilldropICMPpingpacketsthathaveasizegreaterthanthisconfigured
MaxICMPPktSize.Thefactorydefaultisdisabled.
DenialofServiceL4Port Enableordisablethisoptionbyselectingthecorrespondinglineonthe
pulldownen
tryfield.EnablingL4PortDoSpreventioncausestheswitchto
droppacketsthathaveTCP /UDPsourceportequaltoTCP /UDPdestination
port.Thefactorydefaultisdisabled.
DenialofServiceSIP=DIP Enableordisablethisoptionbyselectingthecorrespondinglineonthe
pulldownentryfield.EnablingSIP=DIPDoSpreventioncau
sestheswitchto
droppacketsthathaveasourceIPaddressequaltothedestinationIPaddress.
Thefactorydefaultisdisabled.
DenialofServiceTCPFlag Enableordisablethisoptionbyselectingthecorrespondinglineonthe
pulldownentryfield.EnablingTCPFlagDoSpreventioncausestheswitchto
dr
oppacketsthathaveTCPflagSYNsetandTCPsourceportlessthan1024or
TCPcontrolflagssetto0andTCPsequencenumbersetto0orTCPflagsFIN,
URG,andPSHsetandTCPsequencenumbersetto0orbothTCPflagsSYNand
FINset.Thefa
ctorydefaultisdisabled.
DenialofServiceTCP
Fragment
Enableordisablethisoptionbyselectingthecorrespondinglineonthe
pulldownentryfield.EnablingTCPFragmentDoSpreventioncausestheswitch
todroppacketsthathaveanIPfragmentoffsetequalto1.Thefactorydefault
isdisabled.

Содержание

Похожие устройства

Скачать