Fortinet 548B - Manual (Page 306)

- 306 -
Default Setting
Disabled
Command Mode
Global Config
7.13.2.9 dos-control icmpv4
This command enables Maximum ICMPv4 Packet Size Denial of Service protections. If the mode is
enabled, Denial of Service prevention is active for this type of attack. If ICMPv4 Echo Request (PING)
packets ingress having a size greater than the configured value, the packets will be dropped if the mode
is enabled.
Syntax
dos-control icmpv4 [<0-16384>]
no dos-control icmpv4
<0-16384> - This command sets maximum ICMPv4 packet size.
no - This command resets the Maximum ICMPv4 Packet Size Denial of Service protections to its
default value.
Default Setting
512
Command Mode
Global Config
7.13.2.10 dos-control icmpv6
This command enables Maximum ICMPV6 Packet Size Denial of Service protections. If the mode is
enabled, Denial of Service prevention is active for this type of attack. If ICMPV6 Echo Request (PING)
packets ingress having a size greater than the configured value, the packets will be dropped if the mode
is enabled.
Syntax
dos-control icmpv6 [<0-16384>]
no dos-control icmpv6
<0-16384> - This command sets maximum ICMPV6 packet size.