Protecting against Denial of Service Attacks

In this section:

  1. Denial of Service Protection Overview
    In a Denial-of-Service (DoS) attack, a router is flooded with useless packets for the purpose of slowing down or stopping normal operation.
  2. Protecting against Smurf Attacks
  3. Protecting against TCP SYN Attacks
  4. Defense against TCP Denial of Service Attacks on ICX 8100 and ICX 8200 Devices
  5. Defense against ICMP Denial of Service Attacks on ICX 8100 and ICX 8200 Devices
  6. Displaying Statistics from a DoS Attack
  7. Clear DoS Attack Statistics
  8. Distributed Denial of Service Protection Overview
    A distributed denial-of-service (DDoS) attack occurs when multiple sources launch an attack that overwhelms the network, disrupting regular traffic. In this type of attack, malicious packets are sent to the target's IP address to slow down or halt normal operations.
  9. Protection Against a Gratuitous ARP Attack
  10. Dropping Suspicious ARP Packets
  11. Displaying Statistics from a DDoS Gratuitous ARP Attack
  12. Protection Against UDP Flooding
  13. Configuring UDP Rate Limit
    On ICX 8200 switches, the following commands can be entered in global configuration mode to enable rate limiting for all UDP packets destined to the CPU.
  14. Displaying Statistics from a UDP Rate Limit
  15. Displaying DDoS Security Configuration Details
  16. Clear DDoS Attack Statistics