Command Groups 125
Denial of Service
Command Description Mode*
dos-control firstfrag Enables Minimum TCP Header Size Denial of
Service protection.
GC
dos-control icmp Enables Maximum ICMP Packet Size Denial of
Service protections.
GC
dos-control l4port Enables L4 Port Denial of Service protection. GC
dos-control sipdip Enables Source IP Address = Destination IP
Address (SIP=DIP) Denial of Service
protection.
GC
dos-control tcpflag Enables TCP Flag Denial of Service
protections.
GC
dos-control tcpfrag Enables TCP Fragment Denial of Service
protection.
GC
ip icmp echo-reply Enables or disables the generation of ICMP
Echo Reply messages.
GC
ip icmp error-interval Limits the rate at which IPv4 ICMP error
messages are sent.
GC
ip icmp unreachables Enables the generation of ICMP Destination
Unreachable messages.
IC
ip icmp redirects Enables the generation of ICMP Redirect
messages.
IC
ipv6 icmp error-internal Limits the rate at which ICMPv6 error messages
are sent.
GC
ipv6 unreachables Enables the generation of ICMPv6 Destination
Unreachable messages.
IC
show dos-control Displays Denial of Service configuration
information.
PE
*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 64.
