Siemens S323, S223 user manual SYN Configuration, Verifying Packet Dump

UMN:CLI	User Manual
	SURPASS hiD 6615 S223/S323 R1.5

help prevent that hackers can find impossible connections.

To configure not to send the message that informs TCP connection can not be done, use the following command.

Command	Mode	Description
ip tcp ignore rst-unknown		Configures to block the message that informs TCP
		connection can not be done.
	Global
no ip tcp ignore rst-unknown		Responds the message again that informs TCP con-
		nection is not possible.

7.15.2SYN Configuration

SYN sets up TCP connection. The hiD 6615 S223/S323 transmits cookies with SYN to a person who tries to make TCP connection. And only when transmitted cookies are re- turned, it is possible to permit TCP connection. This function prevents connection over- crowding because of accessed users who are not using and helps the other users use service.

To permit connection only when transmitted cookies are returned after sending cookies with SYN, use the following command.

Command	Mode	Description
ip tcp syncookies		Permits only when transmitted cookies are returned
		after sending cookies with SYN.
	Global
no ip tcp syncookies		Disables configuration to permit only when transmitted
		cookies are returned after sending cookies with SYN.

7.16Packet Dump

Failures in network can occur by certain symptom. Each symptom can trace to one or more problems by using specific troubleshooting tools. The hiD 6615 S223/S323 switch provides the debug command to dump packet. Use debug commands only for problem isolation. Do not use it to monitor normal network operation. The debug commands pro- duce a large amount of processor overhead.

7.16.1Verifying Packet Dump

You can configure a packet dump type to verify dumped packets as the follows.

•Packet Dump by Protocol

•Packet Dump with Option

The hiD 6615 S223/S323 also provides debug command for Layer 3 routing protocols (BGP, OSPF, RIP and PIM). If you want to debug about them, refer to the each configura- tion chapter.

174 A50010-Y3-C150-2-7619