Administrator Guide

Dell Networking CLI 147
Denial of Service
Management ACL
a. For the meaning of each Mode abbreviation, see Mode Types on page 100.
Command Description Mode
a
a. For the meaning of each Mode abbreviation, see Mode Types on page 100.
dos-control firstfrag Enables Minimum TCP Header Size Denial of
Service protection.
GC
dos-control icmp Enables Maximum ICMP Packet Size Denial of
Service protections.
GC
dos-control l4port Enables L4 Port Denial of Service protection. GC
dos-control sipdip Enables Source IP Address = Destination IP
Address (SIP=DIP) Denial of Service protection.
GC
dos-control tcpflag Enables TCP Flag Denial of Service protections. GC
dos-control tcpfrag Enables TCP Fragment Denial of Service
protection.
GC
rate-limit cpu
Configures the rate in packets-per-second for
the number of IPv6 data packets trapped to
CPU when the packet fails to be forwarded in
the hardware due to unresolved hardware
address of the destined IPv6 node.
GC
show dos-control Displays Denial of Service configuration
information.
PE
show system internal
pktmgr
Displays the configured CPU rate limit for
unknown packets in packets per second.
PE
storm-control broadcast Enables Broadcast storm control. IC
storm-control multicast Enables the switch to count Multicast packets
together with Broadcast packets.
IC
storm-control unicast Enables Unicast storm control. IC
Command Description Mode
a
deny (management) Defines a deny rule. MA
2CSNXXX_SWUM204.book Page 147 Monday, January 25, 2016 1:25 PM