mac

408
Usage Guide: With this function enabled the switch will be protected from the ICMP
fragment attacks, dropping the fragment ICMPv4/v6 data packets whose net length is
smaller than the specified value.
Example: Enable the ICMP fragment attack checking function.
Switch(config)#dosattack-check icmp-attacking enable
28.8 dosattack-check icmpV4-size
Command: dosattack-check icmpV4-size <64-1023>
Function: Configure the max net length of the ICMPv4 data packet permitted by the
switch.
Parameter: <64-1023> is the max net length of the ICMPv4 data packet permitted by the
switch.
Default: The value is 0x200 by default
Command Mode: Global Mode
Usage Guide: To use this function you have to enable ―dosattack-check icmp-attacking
enable‖ first.
Example: Set the max net length of the ICMPv4 data packet permitted by the switch to
100.
Switch(config)#dosattack-check icmp-attacking enable
Switch(config)#dosattack-check icmpV4-size 100
28.9 dosattack-check icmpv6-size
This command is not supported by switch.