Accton Technology ES4626 User Manual
Page 104
104
2.6.2.3 Anti Port Cheat Function Configuration Task Sequence
1．Enable the anti port cheat function
Command Explanation
Global Mode
dosattack-check
srcport-equal-dstport enable
Enable the prevent-port-cheat function
2.6.2.4 Prevent TCP Fragment Attack Function Configuration Task
Sequence
1．Enable the prevent TCP fragment attack function
2．Configure the minimum permitted TCP head length of the packet
Command Explanation
Global Mode
dosattack-check tcp-fragment enable
Enable the prevent TCP fragment attack
function
dosattack-check tcp-header
dosattack-check tcp-fragment enable
Configure the minimum permitted TCP head
length of the packet. This command has no
effect when used separately, the user should
enable the dosattack-check tcp-fragment
enable
2.6.2.5 Prevent ICMP Fragment Attack Function Configuration Task
Sequence
1. Enable the prevent ICMP fragment attack function
2. Configure the max permitted ICMPv4 net load length
3. Configure the max permitted ICMPv6 net load length
Command Explanation
Global Mode
dosattack-check icmp-attacking
enable
Enable the prevent ICMP fragment attack
function
dosattack-check icmpv4-size
Configure the max permitted ICMPv4 net
length. This command has not effect when
used separately, the user have to enable the
dosattack-check icmp-attacking enable