Table of Contents
Advertisement
Security DoS Commands
security-suite dos (Interface)
security-suite dos (Interface)
Cisco 220 Series Smart Plus Switches Command Line Interface Reference Guide Release 1.0.0.x
The default parameters are:
•
The maximum size of ICMP ping packets is 512 bytes.
•
The minimum size of IPv6 fragments is 1240 bytes.
•
The Smurf netmask length is 0 bytes.
•
The minimum TCP header length is 20 bytes.
Command Mode
Global Configuration mode
Example
The following example enables checking the minimum size of IPv6 fragments and
sets the minimum fragment size to 1000 bytes:
switchxxxxxx(config)# security-suite dos ipv6-min-frag-size-check
switchxxxxxx(config)# security-suite dos ipv6-min-frag-size-length 1000
To enable DoS protections on an interface, use the security-suite dos Interface
Configuration (Ethernet) mode command.
To disable DoS protections on an interface, use the no form of this command.
Syntax
security-suite dos
no security-suite dos
Parameters
N/A
Default Configuration
Disabled
Command Mode
Interface Configuration (Ethernet) mode
31
425
Advertisement
Table of Contents
