Configuring denial of service defense, Figure 68: dos tab (configuration) – Allied Telesis AT-S63 User Manual

Page 186

Advertising
background image

Chapter 15: Denial of Service Defenses

186

Section II: Advanced Operations

Configuring Denial of Service Defense

To configure the ports on the switch for a Denial of Service attack defense,
perform the following procedure:

1. From the home page, select Configuration.

2. From the Configuration menu, select the Network Security option.

3. Select the DoS tab.

The DoS tab is shown in Figure 68.

Figure 68. DoS Tab (Configuration)

4. If you are implementing the SMURF or Land defense, you must

provide an IP address and mask for your LAN. To do this, complete
the following procedure. Otherwise, skip ahead to Step 5.

a. In the DoS LAN Subnet IP field, enter the IP address of one of the

devices connected to the switch, preferably the lowest IP address.

b. In the DoS Subnet Mask field, enter the LAN’s mask. enter the

mask. A binary “1” indicates the switch should filter on the
corresponding bit of the IP address, while a “0” indicates that it
should not. As an example, assume that the devices connected to
a switch are using the IP address range 149.11.11.1 to

Advertising