Switching Commands
221
ProSafe Managed Switch
dos-control icmpfrag
This command enables ICMP Fragment Denial of Service protection. If the mode is enabled,
Denial of Service prevention is active for this type of attack. If packets ingress having
fragmented ICMP packets, the packets will be dropped if the mode is enabled.
Default
Format dos-control icmpfrag
Mode
no dos-control icmpfrag
This command disabled ICMP Fragment Denial of Service protection.
Format no dos-control icmpfrag
Mode
show dos-control
This command displays Denial of Service configuration information.
Format show dos-control
Mode
Note: Not all messages below are available in all 7000series managed
switches.
disabled
Global Config
Global Config
Privileged EXEC
Term Definition
First Fragment
Mode May be enabled or disabled. The factory default is disabled.
Min TCP Hdr
Size <0-255> The factory default is 20.
ICMP Mode May be enabled or disabled. The factory default is disabled.
Max ICMPv4 Pkt
Size The range is 0-1023. The factory default is 512.
Max ICMPv6 Pkt
Size The range is 0-16384. The factory default is 512.
ICMP Fragment
Mode May be enabled or disabled. The factory default is disabled.
L4 Port Mode May be enabled or disabled. The factory default is disabled.
TCP Port Mode May be enabled or disabled. The factory default is disabled.