attack-defense tcp fragment enable

Syntax

attack-defense tcp fragment enable

undo attack-defense tcp fragment enable

View

System view

Default level

2: System level

Description

Use attack-defense tcp fragment enable to enable TCP fragment attack protection.

Use undo attack-defense tcp fragment enable to disable TCP fragment attack protection.

By default, TCP fragment attack protection is enabled.

TCP fragment attack protection drops attack TCP fragments to prevent TCP fragment attacks.

Examples

# Enable TCP fragment attack protection.

<Sysname> System-view
[Sysname] attack-defense tcp fragment enable