TP-LINK tl-sl5428e Data Sheet

Page of 303
 
DoS Attack Type 
Description 
Ping Of Death 
ICMP ECHO Request Packet whose sum of "Fragment Offset" and 
"Total Length" fields in the IP header is greater than 65535 may cause 
Ping of Death attack. As the maximum packet length of an IPv4 packet 
including the IP header is 65,535 bytes, many computer systems could 
not properly handle this malformed or malicious ICMP ECHO Request 
Packet. Thus, the hosts may break down or reboot automatically when 
receive this kind of packet. 
Table 12-1 Defendable DoS Attack Types   
12.4.1  DoS Defend 
On this page, you can enable the DoS Defend type appropriate to your need. 
Choose the menu Network Security→DoS Defend→DoS Defend to load the following page. 
 
Figure 12-17 DoS Defend 
The following entries are displayed on this screen:
 
 
Defend Config 
DoS Defend: 
Allows you to Enable/Disable DoS Defend function. 
Ping Limiting: 
Specify the transmission rate of the Ping packets when the Defend
Type Ping Flooding is enabled. 
SYN Limiting: 
Specify the transmission rate of the SYN/SYN-ACK packets when 
the Defend Type SYN/SYN-ACK Flooding is enabled. 
 
Defend Table 
Select: 
Select the entry to enable the corresponding Defend Type. 
208