Fortinet 548B - Manual (Page 307)

- 307 -
no - This command resets the Maximum ICMPV6 Packet Size Denial of Service protections to its
default value.
Default Setting
512
Command Mode
Global Config
7.13.2.11 dos-control icmpfrag
This command enables the ICMP Fragment Denial of Service protection. If the mode is enabled, Denial
of Service prevention is active for this type of attack. If packets ingress has fragmented ICMP packets,
the packets will be dropped if the mode is enabled.
Syntax
dos-control icmpfrag
no dos-control icmpfrag
no - This command disables the ICMP Fragment Denial of Service protection.
Default Setting
Disabled
Command Mode
Global Config
7.13.2.12 dos-control smacdmac
This command enables the Source MAC address = Destination MAC address (SMAC=DMAC) Denial of
Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If
packets ingress with SMAC=DMAC, the packets will be dropped if the mode is enabled.
Syntax
dos-control smacdmac
no dos-control smacdmac
no - This command disables the Source MAC address = Destination MAC address (SMAC=DMAC)
Denial of Service protection.