Reference Guide

dos-control tcpsynfin
Note
This command is only supported on the BCM56224, BCM56514, BCM56624, BCM56634,
BCM56636 and BCM56820 and BCM5621x platforms.
This command enables TCP SYN and FIN Denial of Service protection. If the mode is enabled, Denial of
Service prevention is active for this type of attack. If packets ingress having TCP flags SYN and FIN set,
the packets will be dropped if the mode is enabled.
Default Disabled
Format dos-control tcpsynfin
Mode Global Config
no dos-control tcpsynfin
This command sets disables TCP SYN & FIN Denial of Service protection.
Format no dos-control tcpsynfin
Mode Global Config
dos-control tcpfinurgpsh
Note
This command is only supported on the BCM56224, BCM56514, BCM56624, BCM56634,
BCM56636 and BCM56820 and BCM5621x platforms.
This command enables TCP FIN and URG and PSH and SEQ = 0 checking Denial of Service protections.
If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress
having TCP FIN, URG, and PSH all set and TCP Sequence Number set to 0, the packets will be dropped
if the mode is enabled.
Default
Disabled
Format dos-control tcpfinurgpsh
Mode Global Config
no dos-control tcpfinurgpsh
This command sets disables TCP FIN and URG and PSH and SEQ = 0 checking Denial of Service
protections.
Format
no dos-control tcpfinurgpsh
Mode Global Config
Switching Commands
ExtremeSwitching 200 Series: Command Reference Guide for version 01 .02.04.0007 480