Cisco Systems SF300-24P Manual de usuario descargar pdf (Pagina 365)

100

101

Security

Denial of Service Prevention

Cisco Small Business 300 Series Managed Switch Administration Guide 348

STEP 4 Click Apply. The SYN rate protection is defined, and the Running Configuration is

updated.

ICMP Filtering

The ICMP Filtering page enables the blocking of ICMP packets from certain

sources. This can reduce the load on the network in case of an ICMP attack.

To define ICMP filtering:

STEP 1 Click Security > Denial of Service Prevention > ICMP Filtering.

STEP 2 Click Add.

STEP 3 Enter the parameters.

• Interface—Select the interface on which the ICMP filtering is being defined.

• IP Address—Enter the IPv4 address for which the ICMP packet filtering is

activated or select All Addresses to block ICMP packets from all source

addresses. If you enter the IP address, enter either the mask or prefix length.

• Network Mask—Select the format for the subnet mask for the source IP

address, and enter a value in one of the field:

- Mask—Select the subnet to which the source IP address belongs and

enter the subnet mask in dotted decimal format.

- Prefix Length—Select the Prefix Length and enter the number of bits that

comprise the source IP address prefix.

STEP 4 Click Apply. The ICMP filtering is defined, and the Running Configuration is

updated.

IP Fragmented Filtering

The IP Fragmented page enables blocking fragmented IP packets.

To configure fragmented IP blocking:

STEP 1 Click Security > Denial of Service Prevention > IP Fragments Filtering.

STEP 2 Click Add.

STEP 3 Enter the parameters.

1 2 ... 360 361 362 363 364 365 366 367 368 369 370 ... 482 483

Comentarios a estos manuales

Sin comentarios

Cisco Systems SF300-24P Manual de usuario Pagina 365

Comentarios a estos manuales

Relacionado con productos y manuales para Software Cisco Systems SF300-24P