R0106-HP MSR Router Series Security Command Reference(V7)

644
ping-of-death: Specifies the ping-of-death attack.
smurf: Specifies the smurf attack.
snork: Specifies the UDP snork attack.
tcp-all-flags: Specifies the attack where a TCP packet has all flags set.
tcp-fin-only: Specifies the attack where a single TCP FIN packet is sent to a privileged port (port number
lower than 1024).
tcp-invalid-flags: Specifies the attack that uses TCP packets with invalid flags.
tcp-null-flag: Specifies the attack where a single TCP packet has no TCP flags set.
tcp-syn-fin: Specifies the attack where a TCP packet has both SYN and FIN flags set.
teardrop: Specifies the teardrop attack.
tiny-fragment: Specifies the tiny fragment attack.
traceroute: Specifies the traceroute attack.
udp-bomb: Specifies the UDP bomb attack.
winnuke: Specifies the WinNuke attack.
action: Specifies the actions against the single-packet attack. If you do not specify this keyword, the
default action of the attack level to which the single-packet attack belongs is used.
drop: Drops packets that match the specified signature.
logging: Enables logging for the specified single-packet attack.
none: Takes no action.
Usage guidelines
One command execution enables signature detection for only one single-packet attack type. You can use
this command multiple times to configure signature detection for multiple single-packet attack types.
When you specify a packet type by its value, if the packet type has a corresponding keyword, the
keyword is displayed in command output. Otherwise, the value is displayed.
Examples
# Configure signature detection for smurf attack in attack defense policy atk-policy-1.
<Sysname> system-view
[Sysname] attack-defense policy atk-policy-1
[Sysname-attack-defense-policy-atk-policy-1] signature detect smurf action drop
Related commands
signature level action
signature level action
Use signature level action to specify the actions against single-packet attacks of a specific level.
Use undo signature level action to restore the default.
Syntax
signature level { high | info | low | medium } action { { drop | logging } * | none }
undo signature level { high | info | low | medium } action