Tp-Link T1700G-28TQ V2 — настройка защиты от DoS атак на сетевых устройствах [106/354]

Превью страниц Страница 106 / 354

Syntax

ip dos-prevent type { land | scan-synfin | xma-scan | null-scan |

port-less-1024 | blat | ping-flood | syn-flood | win-nuke }

no ip dos-prevent type { land | scan-synfin | xma-scan | null-scan |

port-less-1024 | blat | ping-flood | syn-flood | win-nuke }

Parameter

land —— Land attack.

scan-synfin —— Scan SYNFIN attack.

xma-scan —— Xma Scan attack.

null-scan —— NULL Scan attack.

port-less-1024 ——The SYN packets whose Source Port less than 1024.

blat —— Blat attack.

ping-flood —— Ping flooding attack. With the ping flood attack enabled, the

switch will limit automatically the forwarding speed of ping packets to 512K

when attacked by ping flood.

syn-flood —— SYN/SYN-ACK flooding attack. With the syn-flood attack

enabled, the switch will limit automatically the forwarding speed of ping

packets to 512K when attacked by syn-flood.

win-nuke —— winNuke attack.

Command Mode

Global Configuration Mode

Privilege Requirement

Only Admin, Operator and Power User level users have access to these

commands.

Example

Enable the DoS Defend Type named Land attack:

T1700G-28TQ(config)#ip dos-prevent type land