Command Reference Guide

Denial of Service Commands
CLI Command Reference
September 2014 Page 470
HP Moonshot Switch Module CLI Command Reference
dos-control all
This command enables Denial of Service protection checks globally.
no dos-control all
This command disables Denial of Service prevention checks globally.
dos-control firstfrag
This command enables Minimum TCP Header Size Denial of Service protection. If the mode is enabled, Denial
of Service prevention is active for this type of attack. If packets ingress having a TCP Header Size smaller then
the configured value, the packets will be dropped if the mode is enabled.The default is
disabled. If you enable
dos-control firstfrag, but do not provide a Minimum TCP Header Size, the system sets that value to
20.
no dos-control firstfrag
This command sets Minimum TCP Header Size Denial of Service protection to the default value of disabled.
Default disabled
Format
dos-control all
Mode Global Config
Format
no dos-control all
Mode Global Config
Default disabled (20)
Format
dos-control firstfrag [0-255]
Mode Global Config
Format
no dos-control firstfrag
Mode Global Config