QTECH QSW-2800 Инструкция по настройке - Manual (Page 323)

+7(495) 797-3311 www.qtech.ru
Москва, Новозаводская ул., 18, стр. 1
309
[no] dosattack-check tcp-flags enable Enable/disable checking TCP label function.
41.2.3 Anti Port Cheat Function Configuration Task Sequence
Enable the anti port cheat function
Command Explanation
Global Mode
[no] dosattack-check srcport-equal-
dstport enable
Enable/disable the prevent-port-cheat function.
41.2.4 Prevent TCP Fragment Attack Function Configuration Task
Sequence
1. Enable the prevent TCP fragment attack function
2. Configure the minimum permitted TCP head length of the packet
Command Explanation
Global Mode
[no] dosattack-check tcp-fragment
enable
Enable/disable the prevent TCP fragment attack
function.
dosattack-check tcp-header <size>
Configure the minimum permitted TCP head
length of the packet. This command has no
effect when used separately, the user should
enable the dosattack-check tcp-fragment
enable.
Note: This function is not supported by switch.
41.2.5 Prevent ICMP Fragment Attack Function Configuration Task
Sequence
1. Enable the prevent ICMP fragment attack function
2. Configure the max permitted ICMPv4 net load length
Command Explanation
Global Mode