Allied-telesis AT-S63 Uživatelský manuál Strana 355
- Strana / 680
- Tabulka s obsahem
- KNIHY
Hodnocené. / 5. Na základě hodnocení zákazníků
AT-S63 Management Software Command Line Interface User’s Guide
Section II: Advanced Operations 355
SET DOS IPOPTION
Syntax
set dos ipoption port=
port
state=enable|disable
[mirroring=yes|no|on|off|true|false|enabled|disabled]
Parameters
port Specifies the switch port where you want to enable or
disable the IP Option defense. You can specify more
than one port at a time.
state Specifies the state of the IP Option defense. The
options are:
enable Activates the defense.
disable Deactivates the defense. This is the default.
mirroring Specifies whether the examined traffic is copied to a
mirror port. Options are:
yes, on, true Traffic is mirrored. These values are
enabled equivalent.
no, off, false Traffic is not mirrored. This is the
disabled default. These values are equivalent.
Description
This command enables and disables the IP Option DoS defense.
This type of attack occurs when an attacker sends packets containing bad
IP options to a victim node. There are many different types of IP options
attacks and the AT-S63 management software does not try to distinguish
between them. Rather, a switch port where this defense is activated
counts the number of ingress IP packets containing IP options. If the
number exceeds 20 packets per second, the switch considers this a
possible IP options attack and does the following occurs:
The switch sends a trap to the management stations.
The switch blocks all traffic on the port for one minute.
This defense mechanism does not involve the switch’s CPU. You can
activate it on as many ports as you want without it impacting switch
performance.
- Command Line Interface 1
- User’s Guide 1
- Contents 10
- How This Guide is Organized 16
- Document Conventions 17
- Contacting Allied Telesyn 19
- New Features History 20
- AT-S63 Version 21
- Basic Operations 23
- Chapter 1 25
- Command Formatting 28
- AT-9424Ti/SP Series Switches 29
- Basic Command Line Commands 31
- CLEAR SCREEN 32
- LOGOFF, LOGOUT and QUIT 35
- SAVE CONFIGURATION 37
- SET PROMPT 38
- SET SWITCH CONSOLEMODE 39
- SHOW USER 40
- Basic Switch Commands 41
- “SHOW SYSTEM” on page 79 42
- DISABLE DHCPBOOTP 43
- DISABLE IP REMOTEASSIGN 44
- DISABLE TELNET 45
- ENABLE BOOTP 46
- ENABLE DHCP 47
- ENABLE IP REMOTEASSIGN 48
- ENABLE TELNET 49
- PURGE IP 51
- RESET SWITCH 52
- RESET SYSTEM 53
- RESTART REBOOT 54
- RESTART SWITCH 55
- SET ASYN 57
- SET IP INTERFACE 58
- SET IP ROUTE 60
- SET PASSWORD MANAGER 61
- SET PASSWORD OPERATOR 62
- SET SWITCH CONSOLETIMER 63
- SET SYSTEM 64
- SET TELNET INSERTNULL 65
- SET USER PASSWORD 66
- SHOW ASYN 67
- SHOW CONFIG DYNAMIC 68
- SHOW CONFIG INFO 71
- SHOW DHCPBOOTP 72
- SHOW IP INTERFACE 74
- SHOW SWITCH 76
- SHOW SYSTEM 79
- Enhanced Stacking Commands 81
- ACCESS SWITCH 82
- SET SWITCH STACKMODE 84
- SHOW REMOTELIST 86
- ADD SNTPSERVER PEER 90
- DISABLE SNTP 92
- ENABLE SNTP 93
- PURGE SNTP 94
- SET DATE 95
- SET SNTP 96
- SET TIME 97
- SHOW SNTP 98
- SHOW TIME 100
- SNMPv2 and SNMPv2c Commands 101
- ADD SNMP COMMUNITY 102
- Section I: Basic Features 103 103
- CREATE SNMP COMMUNITY 104
- Examples 105
- Description 105
- 106 Section I: Basic Features 106
- DELETE SNMP COMMUNITY 107
- 108 Section I: Basic Features 108
- DESTROY SNMP COMMUNITY 109
- DISABLE SNMP 110
- DISABLE SNMP AUTHENTICATETRAP 111
- DISABLE SNMP COMMUNITY 112
- ENABLE SNMP 113
- ENABLE SNMP AUTHENTICATETRAP 114
- ENABLE SNMP COMMUNITY 115
- SET SNMP COMMUNITY 116
- SHOW SNMP 118
- 120 Section I: Basic Features 120
- Port Parameter Commands 121
- ACTIVATE SWITCH PORT 122
- DISABLE INTERFACE LINKTRAP 123
- DISABLE SWITCH PORT 124
- DISABLE SWITCH PORT FLOW 125
- ENABLE INTERFACE LINKTRAP 126
- ENABLE SWITCH PORT 127
- ENABLE SWITCH PORT FLOW 128
- PURGE SWITCH PORT 129
- RESET SWITCH PORT 130
- SET SWITCH PORT 131
- Equivalent Commands 134
- SET SWITCH PORT FILTERING 135
- SET SWITCH PORT RATELIMITING 138
- SHOW INTERFACE 141
- SHOW SWITCH PORT 143
- Port Statistics Commands 149
- RESET SWITCH PORT COUNTER 150
- SHOW SWITCH COUNTER 151
- SHOW SWITCH PORT COUNTER 154
- MAC Address Table Commands 155
- ADD SWITCH FDB 156
- DELETE SWITCH FDB 158
- RESET SWITCH FDB 160
- Parameter 161
- Parameters 162
- SHOW SWITCH FDB 163
- Static Port Trunking Commands 167
- ADD SWITCH TRUNK 168
- CREATE SWITCH TRUNK 170
- DELETE SWITCH TRUNK 172
- DESTROY SWITCH TRUNK 173
- SET SWITCH TRUNK 174
- SHOW SWITCH TRUNK 175
- LACP Port Trunking Commands 177
- ADD LACP PORT 178
- CREATE LACP AGGREGATOR 179
- DELETE LACP PORT 181
- DESTROY LACP AGGREGATOR 182
- DISABLE LACP 183
- ENABLE LACP 184
- SET LACP AGGREGATOR 185
- SET LACP SYSPRIORITY 187
- SET LACP STATE 188
- SHOW LACP 189
- Port Mirroring Commands 193
- SET SWITCH MIRROR 194
- SET SWITCH PORT MIRROR 195
- SHOW SWITCH MIRROR 196
- Networking Stack 197
- DELETE IP ARP 198
- DELETE TCP 199
- RESET IP ARP 200
- SET IP ARP TIMEOUT 201
- SHOW IP ARP 202
- SHOW IP ROUTE 203
- SHOW TCP 204
- 169.254.37.1:23 205
- IP Address 205
- TCP Port 205
- Chapter 13: Networking Stack 206
- Advanced Operations 207
- File System Commands 209
- CREATE CONFIG 212
- DELETE FILE 213
- FORMAT DEVICE 215
- SET CFLASH DIR 218
- SET CONFIG 219
- SHOW CFLASH 221
- SHOW CONFIG 222
- SHOW FILE 223
- SHOW FLASH 224
- Chapter 15 225
- LOAD METHOD=LOCAL 226
- LOAD METHOD=TFTP 228
- LOAD METHOD=XMODEM 232
- UPLOAD METHOD=LOCAL 236
- UPLOAD METHOD=REMOTESWITCH 238
- UPLOAD METHOD=TFTP 243
- UPLOAD METHOD=XMODEM 246
- Chapter 16 249
- ADD LOG OUTPUT 250
- CREATE LOG OUTPUT 252
- DESTROY LOG OUTPUT 256
- DISABLE LOG 257
- DISABLE LOG OUTPUT 258
- ENABLE LOG 259
- ENABLE LOG OUTPUT 260
- PURGE LOG 261
- SAVE LOG 262
- SET LOG FULLACTION 264
- SET LOG OUTPUT 265
- SHOW LOG 268
- SHOW LOG OUTPUT 273
- SHOW LOG STATUS 275
- Classifier Commands 277
- CREATE CLASSIFIER 278
- DESTROY CLASSIFIER 282
- PURGE CLASSIFIER 283
- SET CLASSIFIER 284
- SHOW CLASSIFIER 287
- Access Control List Commands 289
- CREATE ACL 290
- DESTROY ACL 292
- PURGE ACL 293
- SHOW ACL 296
- Chapter 19 299
- MAP QOS COSP 300
- Equivalent Command 301
- PURGE QOS 302
- SET QOS COSP 303
- SET QOS SCHEDULING 304
- SHOW QOS CONFIG 307
- Chapter 20 309
- ADD QOS FLOWGROUP 310
- ADD QOS POLICY 311
- ADD QOS TRAFFICCLASS 312
- CREATE QOS FLOWGROUP 313
- CREATE QOS POLICY 316
- QoS Command Sequence Examples 319
- Example 1: Voice Application 319
- Example 2: Video Application 320
- Example 3: Critical Database 321
- CREATE QOS TRAFFICCLASS 323
- DELETE QOS FLOWGROUP 328
- DELETE QOS POLICY 329
- DELETE QOS TRAFFICCLASS 330
- DESTROY QOS FLOWGROUP 331
- DESTROY QOS POLICY 332
- DESTROY QOS TRAFFICCLASS 333
- SET QOS FLOWGROUP 335
- SET QOS POLICY 338
- SET QOS PORT 341
- SET QOS TRAFFICCLASS 342
- SHOW QOS FLOWGROUP 347
- SHOW QOS POLICY 349
- SHOW QOS TRAFFICCLASS 351
- Chapter 21 353
- SET DOS IPOPTION 355
- SET DOS LAND 357
- SET DOS PINGOFDEATH 358
- SET DOS SMURF 360
- SET DOS SYNFLOOD 361
- SET DOS TEARDROP 362
- SHOW DOS 364
- RRP Snooping 367
- IGMP Snooping Commands 369
- DISABLE IGMPSNOOPING 370
- ENABLE IGMPSNOOPING 371
- SET IP IGMP 372
- SHOW IGMPSNOOPING 375
- SHOW IP IGMP 376
- MLD Snooping Commands 379
- DISABLE MLDSNOOPING 380
- ENABLE MLDSNOOPING 381
- SET IPV6 MLDSNOOPING 382
- SHOW MLDSNOOPING 384
- SHOW IPV6 MLDSNOOPING 386
- RRP Snooping Commands 389
- DISABLE RRPSNOOPING 390
- ENABLE RRPSNOOPING 391
- SHOW RRPSNOOPING 392
- Section IV 393
- 394 Section III: SNMPv3 394
- SNMPv3 Commands 395
- ADD SNMPV3 USER 397
- CLEAR SNMPV3 ACCESS 399
- CLEAR SNMPV3 COMMUNITY 401
- CLEAR SNMPV3 NOTIFY 402
- CLEAR SNMPV3 TARGETADDR 403
- CLEAR SNMPV3 VIEW 404
- CREATE SNMPV3 ACCESS 405
- Section IV: SNMPv3 407 407
- CREATE SNMPV3 COMMUNITY 408
- Section IV: SNMPv3 409 409
- CREATE SNMPV3 GROUP 410
- Section IV: SNMPv3 411 411
- CREATE SNMPV3 NOTIFY 412
- Section IV: SNMPv3 413 413
- CREATE SNMPV3 TARGETADDR 414
- CREATE SNMPV3 TARGETPARAMS 416
- CREATE SNMPV3 VIEW 418
- Section IV: SNMPv3 419 419
- DELETE SNMPV3 USER 420
- DESTROY SNMPv3 ACCESS 421
- Chapter 25: SNMPv3 Commands 422
- 422 Section IV: SNMPv3 422
- DESTROY SNMPv3 COMMUNITY 423
- DESTROY SNMPv3 GROUP 424
- DESTROY SNMPv3 NOTIFY 425
- DESTROY SNMPv3 TARGETADDR 426
- DESTROY SNMPv3 TARGETPARMS 427
- DESTROY SNMPV3 VIEW 428
- PURGE SNMPV3 ACCESS 429
- PURGE SNMPV3 COMMUNITY 430
- PURGE SNMPV3 NOTIFY 431
- PURGE SNMPV3 TARGETADDR 432
- PURGE SNMPV3 VIEW 433
- SET SNMPV3 ACCESS 434
- SET SNMPV3 COMMUNITY 436
- Section IV: SNMPv3 437 437
- SET SNMPV3 GROUP 438
- Section IV: SNMPv3 439 439
- SET SNMPV3 NOTIFY 440
- Section IV: SNMPv3 441 441
- SET SNMPV3 TARGETADDR 442
- SET SNMPV3 TARGETPARAMS 444
- SET SNMPV3 USER 446
- SET SNMPV3 VIEW 448
- Section IV: SNMPv3 449 449
- SHOW SNMPV3 ACCESS 450
- SHOW SNMPV3 COMMUNITY 451
- SHOW SNMPv3 GROUP 452
- SHOW SNMPV3 NOTIFY 453
- SHOW SNMPV3 TARGETADDR 454
- SHOW SNMPV3 TARGETPARAMS 455
- SHOW SNMPV3 USER 456
- SHOW SNMPV3 VIEW 457
- 458 Section IV: SNMPv3 458
- Spanning Tree Protocols 459
- Chapter 26 461
- ACTIVATE STP 462
- DISABLE STP 463
- ENABLE STP 464
- PURGE STP 465
- SET STP PORT 469
- SET SWITCH MULTICASTMODE 471
- SHOW STP 473
- Commands 475
- ACTIVATE RSTP 476
- DISABLE RSTP 477
- ENABLE RSTP 478
- PURGE RSTP 479
- SET RSTP 480
- SET RSTP PORT 483
- 100 Mbps 20,000 484
- 1000 Mbps 2,000 484
- Port Speed Port Cost 484
- SHOW RSTP 486
- ACTIVATE MSTP 490
- ADD MSTP 491
- CREATE MSTP 492
- DELETE MSTP 493
- DESTROY MSTP MSTIID 494
- DISABLE MSTP 495
- ENABLE MSTP 496
- PURGE MSTP 497
- SET MSTP 498
- SET MSTP CIST 501
- SET MSTP MSTI 502
- SET MSTP MSTIVLANASSOC 504
- SET MSTP PORT 505
- Synax 1 Examples 508
- Syntax 2 Examples 508
- SHOW MSTP 509
- Virtual LANs 513
- 514 Section VI: Virtual LANs 514
- VLAN Commands 515
- ADD VLAN 516
- CREATE VLAN 518
- DELETE VLAN 521
- DESTROY VLAN 523
- SET SWITCH INFILTERING 524
- SET SWITCH MANAGEMENTVLAN 525
- SET SWITCH VLANMODE 526
- Section VI: Virtual LANs 527 527
- SET VLAN 528
- SHOW VLAN 529
- 530 Section VI: Virtual LANs 530
- 532 Section VI: Virtual LANs 532
- DISABLE GARP 534
- ENABLE GARP 535
- PURGE GARP 536
- SET GARP PORT 537
- SET GARP TIMER 538
- SHOW GARP 540
- SHOW GARP COUNTER 541
- SHOW GARP DATABASE 543
- SHOW GARP GIP 544
- SHOW GARP MACHINE 545
- 546 Section VI: Virtual LANs 546
- Protected Ports VLAN Commands 547
- ADD VLAN GROUP 548
- CREATE VLAN PORTPROTECTED 550
- Chapter 32 557
- ADD VLAN MACADDRESS 558
- ADD VLAN PORT MACADDRESS 559
- CREATE VLAN TYPE=MACADDRESS 560
- DELETE VLAN MACADDRESS 562
- DELETE VLAN PORT MACADDRESS 563
- Port Security 567
- 568 Section IV: Port Security 568
- SET SWITCH PORT SECURITYMODE 571
- SHOW SWITCH PORT INTRUSION 574
- SHOW SWITCH PORT SECURITYMODE 575
- Control Commands 577
- DISABLE PORTACCESS 578
- DISABLE RADIUSACCOUNTING 579
- ENABLE PORTACCESS 580
- ENABLE RADIUSACCOUNTING 581
- SET RADIUSACCOUNTING 592
- SHOW PORTACCESS 594
- SHOW PORTACCESS 596
- SHOW RADIUSACCOUNTING 599
- RADIUS accounting: 600
- Management Security 601
- Web Server Commands 603
- DISABLE HTTP SERVER 604
- ENABLE HTTP SERVER 605
- PURGE HTTP SERVER 606
- SET HTTP SERVER 607
- SHOW HTTP SERVER 612
- Encryption Key Commands 613
- CREATE ENCO KEY 614
- Syntax 1 Description 615
- Syntax 1 Examples 616
- Syntax 2 Description 616
- DESTROY ENCO KEY 618
- SET ENCO KEY 619
- SHOW ENCO 620
- Certificate Commands 621
- ADD PKI CERTIFICATE 622
- CREATE PKI CERTIFICATE 624
- CREATE PKI ENROLLMENTREQUEST 627
- DELETE PKI CERTIFICATE 629
- PURGE PKI 630
- SET PKI CERTIFICATE 631
- SET PKI CERTSTORELIMIT 633
- SET SYSTEM DISTINGUISHEDNAME 634
- SHOW PKI 635
- SHOW PKI CERTIFICATE 636
- Chapter 38 637
- SHOW SSL 639
- Secure Shell (SSH) Commands 641
- DISABLE SSH SERVER 642
- ENABLE SSH SERVER 643
- SET SSH SERVER 646
- SHOW SSH 648
- TACACS+ and RADIUS Commands 649
- ADD RADIUSSERVER 650
- ADD TACACSSERVER 652
- DELETE RADIUSSERVER 653
- DELETE TACACSSERVER 654
- DISABLE AUTHENTICATION 655
- ENABLE AUTHENTICATION 656
- PURGE AUTHENTICATION 657
- SET AUTHENTICATION 658
- SHOW AUTHENTICATION 660
- Management ACL Commands 661
- ADD MGMTACL 662
- CREATE MGMTACL 663
- DESTROY MGMTACL 665
- DISABLE MGMTACL 666
- ENABLE MGMTACL 667
- PURGE MGMTACL 668
- SET MGMTACL 669
- SHOW MGMTACL 670
- Numerics 671
Související produkty a manuály pro Počítačový hardware Allied-telesis AT-S63
(72 stránky)
(39 stránky)© 2020, manymanuals.cz. Všechna práva vyhrazena. | 0.041 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Komentáře k této Příručce