User Manual
Table Of Contents
- M4100 Series Managed Switch
- Contents
- 1. Get Started
- 2. Configure System Information
- System Configuration
- Configure Initial Management VLAN Settings
- Define System Information
- View the Switch Status
- Manage Loopback Interfaces
- View the IPv6 Network Neighbor Table
- Configure an IPv4 Management VLAN
- View or Set the System Time
- Configure DNS
- Configure the DHCP Server
- Configure the DHCP Pool
- Configure UDP Relay Global Settings
- Configure the Basic PoE Settings
- Configure Advanced PoE Settings
- View All MIBs Supported by the Switch
- Configure SNMP v3 Settings for a User
- LLDP Overview
- Configure LLDP Global Settings
- Configure an LLDP Interface
- View LLDP Statistics
- View LLDP Local Device Information
- View LLDP Remote Device Information
- View LLDP Remote Device Inventory
- Configure LLDP-MED Global Settings
- Configure the LLDP-MED Interface
- View LLDP-MED Local Device Information
- View LLDP-MED Remote Device Information
- View LLDP-MED Remote Device Inventory
- ISDP Settings Overview
- Configure Timers
- 3. Configure Switching Information
- VLAN Overview
- Configure a Basic VLAN
- Configure an Internal VLAN
- Add a VLAN
- Reset VLAN Configuration
- Configure Internal VLAN Settings
- Configure VLAN Trunking
- Configure VLAN Membership
- View VLAN Status
- Configure Port PVID
- Configure a MAC-Based VLAN Group
- Configure a Protocol-Based VLAN Group
- Configure Protocol-Based VLAN Group Membership
- Configure an IP Subnet–Based VLAN
- Configure Port DVLAN
- Configure a Voice VLAN
- Configure GARP Switch Settings
- Configure GARP Port Settings
- Auto-VoIP Overview
- Spanning Tree Protocol Overview
- Configure Multicast
- IGMP Snooping Overview
- Configure MLD Snooping
- Configure MVR
- Manage MAC Addresses
- Configure Port Settings
- Link Aggregation Group Overview
- VLAN Overview
- 4. Routing
- 5. Configure Quality of Service
- QoS Overview
- Class of Service
- Differentiated Services
- DiffServ Wizard Overview
- Use the DiffServ Wizard
- Configure DiffServ
- Configure the Global Diffserv Mode
- Configure a DiffServ Class
- Configure the Class Match Criteria
- Configure a DiffServ IPv6 Class
- Configure the DiffServ Class Match Criteria
- Configure DiffServ Policy
- Configure DiffServ Policy Attributes
- Configure DiffServ Policy Settings on an Interface
- View Service Statistics
- 6. Manage Device Security
- Management Security Settings
- Configure RADIUS Settings
- TACACS
- Set Up a Login Authentication List
- Configure Management Access
- Manage Certificates
- Manage Telnet
- Port Authentication Overview
- Traffic Control
- Configure a Private Group
- Private VLAN Overview
- Storm Control Overview
- Control DHCP Snooping Settings
- Configure an IP Source Guard Interface
- Configure Dynamic ARP Inspection
- Access Control List Overview
- Use the ACL Wizard
- Create a MAC ACL
- Configure MAC Rules
- Configure ACL MAC Binding
- View or Delete MAC Bindings
- Configure an IP ACL
- Configure Rules for an IP ACL
- Configure IP Extended Rules
- Configure an IPv6 ACL
- Configure IPv6 Rules
- Configure ACL Interface Bindings
- View or Delete IP ACL Bindings
- View or Delete VLAN ACL Bindings
- 7. Monitoring the System
- 8. Maintenance
- A. Default Settings
- B. Configuration Examples
Manage Device Security
299
M4100 Series Managed Switch
13. Use Denial of Service First Fragment to enable first fragment DoS prevention.
First fragment DoS prevention causes the switch to check DoS options on first fragment
IP packets when switch are receiving fragmented IP packets. Otherwise, the switch
ignores the first fragment IP packages.The factory default is disabled.
14. Use Denial of Service ICMP Fragment to enabling ICMP fragment DoS prevention.
ICMP fragment DoS prevention causes the switch to drop ICMP fragmented packets. The
factory default is disabled.
15. Use Denial of Service SIP=DIP to enable SIP=DIP DoS prevention.
This causes the switch to drop packets with a source IP address equal to the destination
IP address. The factory default is disabled.
16. Use Denial of Service SMAC=DMAC to enable SMAC=DMAC DoS prevention.
This causes the switch to drop packets with a source MAC address equal to the
destination MAC address. The factory default is disabled.
17. Use Denial of Service TCP FIN&URG&PSH to enable TCP FIN & URG & PSH DoS
prevention.
This causes the switch to drop packets with TCP flags FIN, URG, and PSH set and TCP
Sequence Number=0. The factory default is disabled.
18. Use Denial of Service TCP Flag &Sequence to enable TCP flag DoS prevention.
This causes the switch to drop packets with TCP control flags set to 0 and TCP sequence
number set to 0. The factory default is disabled.
19. Use Denial of Service TCP Fragment to enable TCP fragment DoS prevention.
This causes the switch to drop packets:
• First TCP fragments that has a TCP payload: IP_Payload_Length - IP_Header_Size
< Min_TCP_Header_Size.
• The factory default is disabled.
20. Use Denial of Service TCP Offset to enable TCP offset DoS prevention.
This causes the switch to drop packets with a TCP header Offset=1. The factory default is
disabled.
21. Use Denial of Service TCP Port to enable TCP port DoS prevention.
This causes the switch to drop packets with TCP source port equal to TCP destination
port. The factory default is disabled.
22. Use Denial of Service TCP SYN to enable TCP SYN DoS prevention.
This causes the switch to drop packets with TCP flags SYN set. The factory default is
disabled.
23. Use Denial of Service TCP SYN&FIN to enable TCP SYN & FIN DoS prevention.
This causes the switch to drop packets with TCP flags SYN and FIN set. The factory
default is disabled.