Login
- Table of Contents
-
- 10-Security Command Reference
- 00-Preface
- 01-AAA commands
- 02-Password control commands
- 03-Public key management commands
- 04-PKI commands
- 05-IPsec commands
- 06-SSH commands
- 07-IP source guard commands
- 08-ARP attack protection commands
- 09-uRPF commands
- 10-SSL commands
- 11-Crypto engine commands
- 12-FIPS commands
- 13-Portal commands
- 14-MACsec commands
- 15-Attack detection and prevention commands
- 16-Object group commands
- Related Documents
-
| Title | Size | Download |
|---|---|---|
| 15-Attack detection and prevention commands | 42.35 KB |
attack-defense tcp fragment enable
Use attack-defense tcp fragment enable to enable TCP fragment attack prevention.
Use undo attack-defense tcp fragment enable to disable TCP fragment attack prevention.
Syntax
attack-defense tcp fragment enable
undo attack-defense tcp fragment enable
Default
TCP fragment attack prevention is enabled.
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
This command enables the device to drop attack TCP fragments to prevent TCP fragment attacks.
TCP fragment attacks can be detected by both software and hardware chips.
Examples
# Enable TCP fragment attack prevention.
<Sysname> System-view
[Sysname] attack-defense tcp fragment enable
# Disable TCP fragment attack prevention.
<Sysname> System-view
[Sysname] undo attack-defense tcp fragment enable
