Security-Suite Deny Fragmented - Cisco 300 Series Cli Manual
Small business 300 series managed switches
command line interface guide release 1.3
Hide thumbs
Also See for 300 Series:
- Cli manual (1117 pages) ,
- Administration manual (586 pages) ,
- Quick start manual (72 pages)
Table of Contents
Advertisement
50
848
50.7
security-suite deny fragmented
Use the security-suite deny fragmented Interface Configuration (Ethernet,
Port-channel) mode command to discard IP fragmented packets from a specific
interface.
Use the no form of this command to permit IP fragmented packets.
Syntax
security-suite deny fragmented
[remove {ip-address | any} {mask | /prefix-length}]}
no security-suite deny fragmented
Parameters
•
ip-address | any—Specifies the destination IP address. Use any to specify
all IP addresses.
•
mask—Specifies the network mask of the IP address.
•
prefix-length—Specifies the number of bits that comprise the IP address
prefix. The prefix length must be preceded by a forward slash (/).
Default Configuration
Fragmented packets are allowed from all interfaces.
If mask is unspecified, the default is 255.255.255.255.
If prefix-length is unspecified, the default is 32.
Command Mode
Interface Configuration (Ethernet, Port-channel) mode
User Guidelines
For this command to work,
and for interfaces.
Example
The following example attempts to discard IP fragmented packets from an
interface.
{[add {ip-address | any} {mask | /prefix-length}] |
security-suite enable
78-21075-01 Command Line Interface Reference Guide
Denial of Service (DoS) Commands
must be enabled both globally
Advertisement
Table of Contents
