Belden Hirschmann EAGLE Referenzhandbuch Seite 514

1 1 .1 .5 dos ic m p-fra gm e nt e d
Enables fragmented ICMP protection.

Mode: Global Config Mode

Privilege Level: Operator

Format: dos icmp-fragmented

no dos ic m p-fra gm e nt e d
Disable the option

Mode: Global Config Mode

Privilege Level: Operator

Format: no dos icmp-fragmented
1 1 .1 .6 dos ic m p pa yloa d-c he c k
Enables ICMP max payload size protection for IPv4 and IPv6.

Mode: Global Config Mode

Privilege Level: Operator

Format: dos icmp payload-check

no dos ic m p pa yloa d-c he c k
Disable the option

Mode: Global Config Mode

Privilege Level: Operator

Format: no dos icmp payload-check
1 1 .1 .7 dos ic m p pa yloa d-size
Configures maximum ICMP payload size (default: 512).

Mode: Global Config Mode

Privilege Level: Operator

Format: dos icmp payload-size <P-1>
Parameter Value
P-1 0..1472
1 1 .1 .8 dos ip-la nd
Enables LAND attack protection - source IP equals destination IP.

Mode: Global Config Mode

Privilege Level: Operator

Format: dos ip-land <P-1>
Parameter Value
P-1 enable
disable
1 1 .1 .9 dos t c p-offse t
Enables TCP offset check - ingress TCP packets with fragment offset 1 are dropped.

Mode: Global Config Mode

Privilege Level: Operator

Format: dos tcp-offset

no dos t c p-offse t
Disable the option

Mode: Global Config Mode

Privilege Level: Operator

Format: no dos tcp-offset
1 1 .1 .1 0 dos t c p-syn
Enables TCP source port smaller than 1024 protection.

Mode: Global Config Mode

Privilege Level: Operator

Format: dos tcp-syn
RM CLI EAGLE20/30
Release 04.1 03/2021
Meaning
Max. ICMP payload size (default: 512)
Meaning
Enable the option.
Disable the option.
DoS Mitigation
11.1 dos
55