+7(495) 797-3311 www.qtech.ru
Москва, Новозаводская ул., 18, стр. 1
[no] dosattack-check tcp-flags enable
Enable/disable checking TCP label function.
41.2.3 Anti Port Cheat Function Configuration Task Sequence
Enable the anti port cheat function
[no] dosattack-check srcport-equal-
dstport enable
Enable/disable the prevent-port-cheat function.
41.2.4 Prevent TCP Fragment Attack Function Configuration Task
Sequence
1. Enable the prevent TCP fragment attack function
2. Configure the minimum permitted TCP head length of the packet
[no] dosattack-check tcp-fragment
enable
Enable/disable the prevent TCP fragment attack
function.
dosattack-check tcp-header <size>
Configure the minimum permitted TCP head
length of the packet. This command has no
effect when used separately, the user should
enable the dosattack-check tcp-fragment
enable.
Note: This function is not supported by switch.
41.2.5 Prevent ICMP Fragment Attack Function Configuration Task
Sequence
1. Enable the prevent ICMP fragment attack function
2. Configure the max permitted ICMPv4 net load length