Ont Access Control Configuration - Huawei EchoLife HG8110 Service Manual

EchoLife HG8010/HG8110/HG8240/HG8245/HG8247/
HG8447 GPON Terminal
Service Manual
Table 5-7 Parameters related to the DoS
Parameter
Prevent SYN Flooding Attack
Prevent ICMP Echo Attack
Prevent ICMP Redirect Attack

5.5.5 ONT Access Control Configuration

1.
Issue 02 (2011-12-08)
In the navigation tree on the left, choose Security > ONT Access Control
Configuration. In the pane on the right, configure the rule of ONT access control, as shown
in Figure 5-21.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Description
Indicates whether to enable the prevent SYN
flooding attack.
In the attack, several source hosts send SYN
packets to a destination host. After receiving
the SYN ACK packets from the destination
host, the source hosts do not respond. In this
case, the destination host establishes many
connection queues for the source hosts and
maintains these queues all the time because
no ACK response is received. As a result,
many resources are used and the destination
host fails to provide normal services for
normal connections.
Indicates whether to enable the prevent ICMP
echo attack.
In the attack, many ICMP echo packets are
sent to a destination host within a short time.
As a result, the network is congested or the
resources of the host are exhausted.
Indicates whether to enable the prevent ICMP
redirect attack.
In the attack, many ICMP redirect packets are
sent to a destination host within a short time.
As a result, the network is congested or the
resources of the host are exhausted.
5 Web Page Reference
321