D-Link DGS-1210-28XS/ME [76/519] Show dos_prevention

DGS-1210 Metro Ethernet Managed Switch CLI Reference Guide

drop.

state [enable | disable]- Enable or disable DoS prevention.

Restrictions Only administrator or operate-level users can issue this command.

Example usage:

To configure a land attack and blat attack prevention:

DGS-1210-28MP/ME:5# config dos_prevention dos_type blat_attack action drop

Command: config dos_prevention dos_type blat_attack action drop

Success.

DGS-1210-28MP/ME:5#

show dos_prevention

Purpose Used to display DoS prevention information.

Syntax

show dos_prevention { land_attack | blat_attack | smurf_attack |

tcp_null_scan | tcp_xmascan | tcp_synfin |

tcp_syn_srcport_less_1024 }

Description

The show dos_prevention

command is used to display DoS

preven

tion information, including the type of DoS attack, the

prevention state, the corresponding action if the prevention is

enabled, and the counter information of the DoS packet.

Parameters The type of DoS attack. Possible values are as follows:

land_attack, blat_attack, smurf_attack, tcp_null_scan, tcp_xmascan

tcp_synfin and tcp_syn_srcport_less_1024.

Restrictions None.

Example usage:

To display DoS prevention information:

DGS-1210-28MP/ME:5# show dos_prevention

Command: show dos_prevention

Trap/Log : Disabled

DosType State Action Frame Counts

-------------------------------------- ---------- ---------------- --------------------

Land Attack Enabled Drop -

Blat Attack Enabled Drop -

Tcp Null Scan Disabled Drop -

Tcp Xmascan Disabled Drop -

Tcp Synfin Enabled Drop -

Tcp Syn Srcport less 1024 Enabled Drop -

Ping Death Attack Disabled Drop -

Tcp Tiny Fragment Disabled Drop -

To display DoS prevention information for Land Attack:

DGS-1210-28MP/ME:5# show dos_prevention land_attack