Login
- Table of Contents
-
- 11-Security Command Reference
- 00-Preface
- 01-AAA Commands
- 02-802.1X Commands
- 03-MAC Authentication Commands
- 04-Portal Commands
- 05 Password Control Commands
- 06-Public Key Commands
- 07-IPsec Commands
- 08-SSH Commands
- 09-Blacklist Commands
- 10-TCP and ICMP Attack Protection Commands
- 11-IP Source Guard Commands
- 12-ARP Attack Protection Commands
- 13-ND Attack Defense Commands
- 14-URPF Commands
- 15-PKI Commands
- 16-SSL Commands
- 17-FIPS Commands
- 18-Attack Detection and Protection Commands
- Related Documents
-
18-Attack Detection and Protection Commands
| Title | Size | Download |
|---|---|---|
| 18-Attack Detection and Protection Commands | 37.81 KB |
attack-defense tcp fragment enable
Use attack-defense tcp fragment enable to enable TCP fragment attack protection.
Use undo attack-defense tcp fragment enable to disable TCP fragment attack protection.
Syntax
attack-defense tcp fragment enable
undo attack-defense tcp fragment enable
Default
TCP fragment attack protection is enabled.
Views
System view
Default command level
2: System level
Usage guidelines
This command enables the device to drop attack TCP fragments to prevent TCP fragment attacks.
Examples
# Enable TCP fragment attack protection.
<Sysname> System-view
[Sysname] attack-defense tcp fragment enable
