Enterasys Networks 1H582-xx User Manual

Page of 808
Security Configuration Command Set
Configuring Denial of Service Prevention
14-99
Example
This example shows how to display Denial of Service security status and counters. For details on 
how to set these parameters, refer to 
14.3.8.2 HostDos
Use this command to enable or disable Denial of Service security features.
HostDos {land | fragmicmp | largeicmp size | checkspoof | portscan}
Matrix>Router(config)#show HostDos
LANDd Attack (Destination IP = Source IP)
Disabled
Spoofed Address Check
Disabled
IP packet with multicast/broadcast source address
Always enabled
0 attacks
Fragmented ICMP traffic
Disabled
Large ICMP packet
Disabled
Ping-of-Death attack
Always enabled
0 attacks
Port Scanning
Disabled
ROUTER: This command can be executed when the device is in router mode only. 
For details on how to enable router configuration modes, refer to