PLANET WGSW-52040 - Manual (Page 390)

45.2.2 Prevent TCP Unauthorized Label Attack
Function Configuration Task Sequence
1．Enable the anti TCP unauthorized label attack function
Command Explanation
Global Mode
[no] dosattack-check tcp-flags enable Enable/disable checking TCP label function.
45.2.3 Anti Port Cheat Function Configuration Task
Sequence
1． Enable the anti port cheat function
Command Explanation
Global Mode
[no] dosattack-check
srcport-equal-dstport enable
Enable/disable the prevent-port-cheat function.
45.2.4 Prevent TCP Fragment Attack Function
Configuration Task Sequence
1．Enable the prevent TCP fragment attack function
2．Configure the minimum permitted TCP head length of the packet
Command Explanation
Global Mode
[no] dosattack-check tcp-fragment
enable
Enable/disable the prevent TCP fragment
attack function.
dosattack-check tcp-header <size>
Configure the minimum permitted TCP head
length of the packet. This command has no
effect when used separately, the user should
enable the dosattack-check tcp-fragment
enable.
Note: This function is not supported by switch.
45-169