DoS Mitigation
16.1.9 dos tcp-offset
Enables TCP offset check - ingress TCP packets with fragment offset 1 are
dropped.
Mode: Global Config Mode
Privilege Level: Operator
Format: dos tcp-offset
no dos tcp-offset
Disable the option
Mode: Global Config Mode
Privilege Level: Operator
Format: no dos tcp-offset
16.1.10dos tcp-syn
Enables TCP source port smaller than 1024 protection.
Mode: Global Config Mode
Privilege Level: Operator
Format: dos tcp-syn
no dos tcp-syn
Disable the option
Mode: Global Config Mode
Privilege Level: Operator
Format: no dos tcp-syn
258
16.1 dos
RM CLI HiOS-2S RSPL
Release 5.0 05/2015