Configuring Denial of Service Attack Protection

C H A P T E R 13

This chapter describes how to configure Denial of Service (DoS) Protection.

The FASTPATH firmware feature:

Protects against the exploitation of a number of vulnerabilities which would make the host or network unstable

Complies with Nessus. LVL7 tested Release 4.3 with Nessus version 2.0.10. Nessus is a widely-used vulnerability assessment tool.

Additionally, the Netra CP3240 switch software provides a number of features that help a network administrator protect networks against DoS attacks.

Configuring Denial of Service via CLI

Enter from Global Config mode:

CODE EXAMPLE 13-1 Configuring DoS via CLI
dos-control sipdip dos-control firstfrag dos-control tcpfrag dos-control l4port dos-control icmp show dos-control