Allied-telesis AT-S62 Manual do Utilizador Página 352
- Página / 656
- Índice
- MARCADORES
Avaliado. / 5. Com base em avaliações de clientes
Chapter 20: Denial of Service Defense Commands
352 Section II: Advanced Operations
SET DOS SMURF
Syntax
set dos smurf port=
port
state=enable|disable
Parameters
port Specifies the switch ports on which you want to enable
or disable SMURF defense. You can select more than
one port at a time.
state Specifies the state of the SMURF defense. The options
are:
enable Activates the defense.
disable Deactivates the defense. This is the default.
Description
This command activates and deactivates the SMURF DoS defense.
This DoS attack is instigated by an attacker sending a Ping request
containing a broadcast address as the destination address and the
address of the victim as the source of the Ping. This overwhelms the
victim with a large number of Ping replies from other network nodes.
A switch port defends against this form of attack by examining the
destination addresses of ingress Ping packets and discarding those that
contain a broadcast address as a destination address.
To implement this defense, you need to specify the IP address of any
device on your network, preferably the lowest IP address, and a mask
using “SET DOS” on page 346. The switch uses the combination of the
two to determine your network’s broadcast address. Any ingress Ping
packets containing the broadcast address are discarded.
This defense mechanism does not involve the switch’s CPU. You can
activate it on as many ports as you want without having it negatively
impact switch performance.
Example
The following command activates this defense on port 17:
set dos smurf port=17 state=enable
- Command Line Interface 1
- User’s Guide 1
- Contents 10
- How This Guide is Organized 16
- Document Conventions 17
- Contacting Allied Telesyn 19
- New Features History 20
- Basic Operations 23
- Chapter 1 25
- Command Formatting 28
- Basic Command Line Commands 31
- CLEAR SCREEN 32
- LOGOFF, LOGOUT and QUIT 35
- SAVE CONFIGURATION 37
- SET PROMPT 38
- SET SWITCH CONSOLEMODE 39
- SHOW USER 40
- Basic Switch Commands 41
- “SHOW SWITCH” on page 80 42
- “SHOW SYSTEM” on page 83 42
- DISABLE DHCPBOOTP 43
- DISABLE IP REMOTEASSIGN 44
- DISABLE TELNET 45
- ENABLE BOOTP 46
- ENABLE DHCP 47
- ENABLE IP REMOTEASSIGN 49
- ENABLE TELNET 51
- FORMAT DEVICE 52
- PURGE IP 54
- RESET SWITCH 55
- RESTART REBOOT 57
- RESTART SWITCH 58
- SET IP INTERFACE 61
- SET IP ROUTE 63
- SET PASSWORD MANAGER 64
- SET PASSWORD OPERATOR 65
- SET SWITCH CONSOLETIMER 66
- SET SYSTEM 67
- SET SYSTEM FANCONTROL 68
- SET USER PASSWORD 70
- SHOW ASYN 71
- SHOW CONFIG DYNAMIC 72
- SHOW CONFIG INFO 75
- SHOW DHCPBOOTP 76
- SHOW IP INTERFACE 78
- SHOW SYSTEM 83
- SHOW SYSTEM FANCONTROL 85
- Enhanced Stacking Commands 87
- ACCESS SWITCH 88
- SET SWITCH STACKMODE 90
- SHOW REMOTELIST 92
- ADD SNTPSERVER PEER 96
- DISABLE SNTP 98
- ENABLE SNTP 99
- SET DATE 101
- SET SNTP 102
- SET TIME 103
- SHOW SNTP 104
- SHOW TIME 106
- SNMPv2 and SNMPv2c Commands 107
- ADD SNMP COMMUNITY 108
- CREATE SNMP COMMUNITY 109
- Description 110
- Examples 110
- DELETE SNMP COMMUNITY 112
- DESTROY SNMP COMMUNITY 113
- DISABLE SNMP 114
- DISABLE SNMP AUTHENTICATETRAP 115
- DISABLE SNMP COMMUNITY 116
- ENABLE SNMP 117
- ENABLE SNMP AUTHENTICATETRAP 118
- ENABLE SNMP COMMUNITY 119
- SHOW SNMP 122
- Port Parameter Commands 125
- ACTIVATE SWITCH PORT 126
- DISABLE INTERFACE LINKTRAP 127
- DISABLE SWITCH PORT 128
- DISABLE SWITCH PORT FLOW 129
- ENABLE INTERFACE LINKTRAP 130
- ENABLE SWITCH PORT 131
- ENABLE SWITCH PORT FLOW 132
- PURGE SWITCH PORT 133
- RESET SWITCH PORT 134
- RESET SWITCH PORT COUNTER 135
- SET SWITCH PORT 136
- Equivalent Commands 139
- flow=pause 140
- SET SWITCH PORT RATELIMITING 141
- SHOW INTERFACE 144
- SHOW SWITCH COUNTER 146
- SHOW SWITCH PORT 149
- SHOW SWITCH PORT COUNTER 153
- MAC Address Table Commands 155
- ADD SWITCH FDB 156
- DELETE SWITCH FDB 158
- RESET SWITCH FDB 160
- Parameter 161
- Parameters 162
- SHOW SWITCH FDB 163
- Static Port Trunking Commands 167
- ADD SWITCH TRUNK 168
- CREATE SWITCH TRUNK 170
- DELETE SWITCH TRUNK 172
- DESTROY SWITCH TRUNK 173
- SET SWITCH TRUNK 174
- SHOW SWITCH TRUNK 175
- LACP Port Trunking Commands 177
- ADD LACP PORT 178
- CREATE LACP AGGREGATOR 179
- DELETE LACP PORT 181
- DESTROY LACP AGGREGATOR 182
- DISABLE LACP 183
- ENABLE LACP 184
- SET LACP AGGREGATOR 185
- SET LACP SYSPRIORITY 187
- SET LACP STATE 188
- SHOW LACP 189
- Port Mirroring Commands 193
- SET SWITCH MIRROR 194
- SET SWITCH PORT MIRROR 195
- SHOW SWITCH MIRROR 196
- Advanced Operations 197
- File System Commands 199
- CREATE CONFIG 202
- DELETE FILE 203
- SET CONFIG 205
- SHOW CONFIG 207
- SHOW FILE 208
- Chapter 13 209
- LOAD METHOD=LOCAL 210
- LOAD METHOD=TFTP 212
- LOAD METHOD=XMODEM 216
- UPLOAD METHOD=LOCAL 219
- UPLOAD METHOD=REMOTESWITCH 221
- UPLOAD METHOD=TFTP 225
- UPLOAD METHOD=XMODEM 228
- Chapter 14 231
- ADD LOG OUTPUT 232
- CREATE LOG OUTPUT 234
- DESTROY LOG OUTPUT 238
- DISABLE LOG 239
- DISABLE LOG OUTPUT 240
- ENABLE LOG 241
- ENABLE LOG OUTPUT 242
- PURGE LOG 243
- SAVE LOG 244
- SET LOG FULLACTION 246
- SET LOG OUTPUT 247
- SHOW LOG 250
- SHOW LOG OUTPUT 255
- SHOW LOG STATUS 257
- Classifier Commands 259
- CREATE CLASSIFIER 260
- DESTROY CLASSIFIER 263
- PURGE CLASSIFIER 264
- SET CLASSIFIER 265
- SHOW CLASSIFIER 268
- Access Control List Commands 271
- CREATE ACL 272
- DESTROY ACL 274
- PURGE ACL 275
- SHOW ACL 278
- Chapter 17 281
- ADD QOS FLOWGROUP 282
- ADD QOS POLICY 283
- ADD QOS TRAFFICCLASS 284
- CREATE QOS FLOWGROUP 285
- CREATE QOS POLICY 288
- QoS Command Sequence Examples 290
- Example 1: Voice Application 290
- Example 2: Video Application 292
- Example 3: Critical Database 293
- CREATE QOS TRAFFICCLASS 295
- DELETE QOS FLOWGROUP 300
- DELETE QOS POLICY 301
- DELETE QOS TRAFFICCLASS 302
- DESTROY QOS FLOWGROUP 303
- DESTROY QOS POLICY 304
- DESTROY QOS TRAFFICCLASS 305
- PURGE QOS 306
- SET QOS FLOWGROUP 307
- SET QOS POLICY 310
- SET QOS PORT 313
- SET QOS TRAFFICCLASS 314
- SHOW QOS FLOWGROUP 319
- SHOW QOS POLICY 321
- SHOW QOS TRAFFICCLASS 323
- Chapter 18 325
- MAP QOS COSP 326
- Equivalent Command 327
- SET QOS COSP 329
- SET QOS SCHEDULING 330
- SHOW QOS CONFIG 333
- IGMP Snooping Commands 335
- DISABLE IGMPSNOOPING 336
- ENABLE IGMPSNOOPING 337
- SET IP IGMP 338
- SHOW IGMPSNOOPING 341
- SHOW IP IGMP 342
- Chapter 20 345
- SET DOS IPOPTION 347
- SET DOS LAND 349
- SET DOS PINGOFDEATH 350
- SET DOS SMURF 352
- SET DOS SYNFLOOD 353
- SET DOS TEARDROP 354
- SHOW DOS 356
- Power Over Ethernet Commands 359
- DISABLE POE PORT 360
- ENABLE POE PORT 361
- SET POE PORT 362
- SET POE THRESHOLD 364
- SHOW POE CONFIG 365
- SHOW POE STATUS 366
- Networking Stack 369
- DELETE IP ARP 370
- DELETE TCP 371
- RESET IP ARP 372
- SET IP ARP TIMEOUT 373
- SHOW IP ARP 374
- SHOW IP ROUTE 375
- SHOW TCP 376
- 169.254.37.1:23 377
- IP Address 377
- TCP Port 377
- Chapter 22: Networking Stack 378
- 380 Section III: SNMPv3 380
- ADD SNMPV3 USER 383
- CLEAR SNMPV3 ACCESS 385
- CLEAR SNMPV3 COMMUNITY 387
- CLEAR SNMPV3 NOTIFY 388
- CLEAR SNMPV3 TARGETADDR 389
- CLEAR SNMPV3 VIEW 390
- CREATE SNMPV3 ACCESS 391
- Section III: SNMPv3 393 393
- Section III: SNMPv3 395 395
- Section III: SNMPv3 397 397
- Section III: SNMPv3 399 399
- CREATE SNMPV3 TARGETADDR 400
- CREATE SNMPV3 TARGETPARAMS 402
- CREATE SNMPV3 VIEW 404
- Section III: SNMPv3 405 405
- DESTROY SNMPv3 ACCESS 407
- Chapter 23: SNMPv3 Commands 408
- 408 Section III: SNMPv3 408
- DESTROY SNMPv3 GROUP 410
- DESTROY SNMPv3 NOTIFY 411
- DESTROY SNMPv3 TARGETADDR 412
- DESTROY SNMPv3 TARGETPARMS 413
- DESTROY SNMPV3 VIEW 414
- PURGE SNMPV3 ACCESS 415
- PURGE SNMPV3 COMMUNITY 416
- PURGE SNMPV3 NOTIFY 417
- PURGE SNMPV3 TARGETADDR 418
- PURGE SNMPV3 VIEW 419
- SET SNMPV3 COMMUNITY 422
- Section III: SNMPv3 423 423
- Section III: SNMPv3 425 425
- Section III: SNMPv3 427 427
- SET SNMPV3 TARGETPARAMS 430
- SET SNMPV3 USER 432
- SET SNMPV3 VIEW 434
- Section III: SNMPv3 435 435
- SHOW SNMPV3 COMMUNITY 437
- SHOW SNMPv3 GROUP 438
- SHOW SNMPV3 NOTIFY 439
- SHOW SNMPV3 TARGETADDR 440
- SHOW SNMPV3 TARGETPARAMS 441
- SHOW SNMPV3 USER 442
- SHOW SNMPV3 VIEW 443
- 444 Section III: SNMPv3 444
- Chapter 24 447
- ACTIVATE STP 448
- DISABLE STP 449
- ENABLE STP 450
- PURGE STP 451
- SET STP PORT 455
- SET SWITCH MULTICASTMODE 457
- SHOW STP 459
- Rapid Spanning Tree Protocol 461
- Commands 461
- ACTIVATE RSTP 462
- DISABLE RSTP 463
- ENABLE RSTP 464
- PURGE RSTP 465
- SET RSTP 466
- SET RSTP PORT 469
- 100 Mbps 20,000 470
- 1000 Mbps 2,000 470
- Port Speed Port Cost 470
- SHOW RSTP 472
- ACTIVATE MSTP 476
- ADD MSTP 477
- CREATE MSTP 478
- DELETE MSTP 479
- DESTROY MSTP MSTIID 480
- DISABLE MSTP 481
- ENABLE MSTP 482
- PURGE MSTP 483
- SET MSTP 484
- SET MSTP CIST 487
- SET MSTP MSTI 488
- SET MSTP MSTIVLANASSOC 490
- SET MSTP PORT 491
- Synax 1 Examples 494
- Syntax 2 Examples 494
- SHOW MSTP 495
- Virtual LANs 499
- 500 Section V: Virtual LANs 500
- ADD VLAN 502
- CREATE VLAN 504
- DELETE VLAN 507
- DESTROY VLAN 509
- SET SWITCH INFILTERING 510
- SET SWITCH MANAGEMENTVLAN 511
- SET SWITCH VLANMODE 512
- Section V: Virtual LANs 513 513
- SHOW VLAN 515
- 518 Section V: Virtual LANs 518
- DISABLE GARP 520
- ENABLE GARP 521
- PURGE GARP 522
- SET GARP PORT 523
- SET GARP TIMER 524
- SHOW GARP 526
- SHOW GARP COUNTER 527
- SHOW GARP DATABASE 529
- SHOW GARP GIP 530
- SHOW GARP MACHINE 531
- 532 Section V: Virtual LANs 532
- ADD VLAN GROUP 534
- CREATE VLAN PORTPROTECTED 536
- SET VLAN 540
- Port Security 543
- 544 Section VI: Port Security 544
- SET SWITCH PORT SECURITYMODE 547
- SHOW SWITCH PORT INTRUSION 550
- SHOW SWITCH PORT SECURITYMODE 551
- 552 Section VI: Port Security 552
- DISABLE PORTACCESS 554
- DISABLE RADIUSACCOUNTING 555
- ENABLE PORTACCESS 556
- ENABLE RADIUSACCOUNTING 557
- Section VI: Port Security 559 559
- 560 Section VI: Port Security 560
- 562 Section VI: Port Security 562
- Section VI: Port Security 565 565
- SET RADIUSACCOUNTING 568
- SHOW PORTACCESS 570
- SHOW PORTACCESS 572
- 574 Section VI: Port Security 574
- RADIUS accounting: 576
- Management Security 577
- Web Server Commands 579
- DISABLE HTTP SERVER 580
- ENABLE HTTP SERVER 581
- PURGE HTTP SERVER 582
- SET HTTP SERVER 583
- SHOW HTTP SERVER 588
- Encryption Key Commands 589
- CREATE ENCO KEY 590
- Syntax 1 Description 591
- Syntax 1 Examples 592
- Syntax 2 Description 592
- DESTROY ENCO KEY 594
- SET ENCO KEY 595
- SHOW ENCO 596
- Certificate Commands 597
- ADD PKI CERTIFICATE 598
- CREATE PKI CERTIFICATE 600
- CREATE PKI ENROLLMENTREQUEST 603
- DELETE PKI CERTIFICATE 605
- PURGE PKI 606
- SET PKI CERTIFICATE 607
- SET PKI CERTSTORELIMIT 609
- SET SYSTEM DISTINGUISHEDNAME 610
- SHOW PKI 611
- SHOW PKI CERTIFICATE 612
- Chapter 35 613
- SHOW SSL 615
- Secure Shell (SSH) Commands 617
- DISABLE SSH SERVER 618
- ENABLE SSH SERVER 619
- SET SSH SERVER 622
- SHOW SSH 623
- TACACS+ and RADIUS Commands 625
- ADD RADIUSSERVER 626
- ADD TACACSSERVER 628
- DELETE RADIUSSERVER 629
- DELETE TACACSSERVER 630
- DISABLE AUTHENTICATION 631
- ENABLE AUTHENTICATION 632
- PURGE AUTHENTICATION 633
- SET AUTHENTICATION 634
- SHOW AUTHENTICATION 636
- Management ACL Commands 637
- ADD MGMTACL 638
- CREATE MGMTACL 639
- DESTROY MGMTACL 641
- DISABLE MGMTACL 642
- ENABLE MGMTACL 643
- PURGE MGMTACL 644
- SET MGMTACL 645
- SHOW MGMTACL 646
- Numerics 647
(62 páginas)
(14 páginas)
Comentários a estes Manuais