DoS Mitigation
13.1.7
dos icmp payload-size
Configures maximum ICMP payload size (default: 512).
Mode: Global Config Mode
Privilege Level: Operator
Format: dos icmp payload-size <P-1>
Parameter Value
0..1472
P-1
13.1.8
dos ip-land
Enables IP LAND attack protection - source IP equals destination IP.
Mode: Global Config Mode
Privilege Level: Operator
Format: dos ip-land
no dos ip-land
Disable the option
Mode: Global Config Mode
Privilege Level: Operator
Format: no dos ip-land
13.1.9
dos tcp-offset
Enables TCP offset check - ingress TCP packets with fragment offset 1 are
dropped.
Mode: Global Config Mode
Privilege Level: Operator
Format: dos tcp-offset
no dos tcp-offset
Disable the option
Mode: Global Config Mode
Privilege Level: Operator
Format: no dos tcp-offset
13.1.10 dos tcp-syn
Enables TCP SYN and L4 source port smaller than 1024 protection.
Mode: Global Config Mode
Privilege Level: Operator
Format: dos tcp-syn
RM CLI HiOS-2S RSPS
Release 3.0 01/2014
Meaning
Max. ICMP payload size (default: 512)
13.1 dos
137