Security Configuration Command Set
Configuring Denial of Service Prevention
Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 14-99
Example
This example shows how to display Denial of Service security status and counters. For details on
how to set these parameters, refer to Section 14.3.8.2:
14.3.8.2 HostDos
Use this command to enable or disable Denial of Service security features.
HostDos {land | fragmicmp | largeicmp size | checkspoof | portscan}
Matrix>Router(config)#show HostDos
LANDd Attack (Destination IP = Source IP)
Disabled
Spoofed Address Check
Disabled
IP packet with multicast/broadcast source address
Always enabled
0 attacks
Fragmented ICMP traffic
Disabled
Large ICMP packet
Disabled
Ping-of-Death attack
Always enabled
0 attacks
Port Scanning
Disabled
ROUTER: This command can be executed when the device is in router mode only.
For details on how to enable router configuration modes, refer to Section 3.3.3.