Reference Guide

Column Meaning
Max ICMPv6 Payload
Size
The maximum ICMPv6 payload size to accept when ICMPv6 DoS protection is enabled.
ICMPv4 Fragment
Mode
The administrative mode of ICMPv4 Fragment DoS prevention. When enabled, this causes
the switch to drop fragmented ICMPv4 packets.
TCP Port Mode The administrative mode of TCP Port DoS prevention. When enabled, this causes the
switch to drop packets that have the TCP source port equal to the TCP destination port.
UDP Port Mode The administrative mode of UDP Port DoS prevention. When enabled, this causes the
switch to drop packets that have the UDP source port equal to the UDP destination port.
SIPDIP Mode The administrative mode of SIP=DIP DoS prevention. Enabling this causes the switch to
drop packets that have a source IP address equal to the destination IP address. The
factory default is disabled.
SMACDMAC Mode The administrative mode of SMAC=DMAC DoS prevention. Enabling this causes the switch
to drop packets that have a source MAC address equal to the destination MAC address.
TCP FIN&URG& PSH
Mode
The administrative mode of TCP FIN & URG & PSH DoS prevention. Enabling this causes
the switch to drop packets that have TCP flags FIN, URG, and PSH set and TCP Sequence
Number = 0.
TCP Flag & Sequence
Mode
The administrative mode of TCP Flag DoS prevention. Enabling this causes the switch to
drop packets that have TCP control flags set to 0 and TCP sequence number set to 0.
TCP SYN Mode The administrative mode of TCP SYN DoS prevention. Enabling this causes the switch to
drop packets that have TCP Flags SYN set.
TCP SYN & FIN Mode The administrative mode of TCP SYN & FIN DoS prevention. Enabling this causes the
switch to drop packets that have TCP Flags SYN and FIN set.
TCP Fragment Mode The administrative mode of TCP Fragment DoS prevention. Enabling this causes the
switch to drop packets that have a TCP payload in which the IP payload length minus the
IP header size is less than the minimum allowed TCP header size.
TCP Oset Mode The administrative mode of TCP Oset DoS prevention. Enabling this causes the switch to
drop packets that have a TCP header Oset equal to 1.
MAC Database Commands
This section describes the commands used to configure and view information about the MAC
databases.
bridge aging-time
This command configures the forwarding database address aging timeout in seconds. The seconds
parameter must be within the range of 10 to 1,000,000 seconds. In an SVL system, the [fdbid/all]
parameter is not used and will be ignored if entered. In an SVL system, the [fdbid/all] parameter is not
used and will be ignored if entered.
Default
300
Format bridge aging-time 10-1,000,000
Mode Global Config
Switching Commands
ExtremeSwitching 200 Series: Command Reference Guide for version 01 .02.04.0007 483