Configuring Host DoS

Host DoS Configuration describes how to configure Host DoS on an S- K- and 7100-Series device. Host DoS configuration commands are entered in global configuration command mode.

Host DoS Configuration

Step	Task	Command(s)
1	Enable host DoS globally for this device. Threats must be specifically enabled for mitigation to occur for that threat as specified in the following step.	hostdos enable
2	Enable a mitigation type, and optionally set the rate at which events will be acted upon.	hostdos {mitigation-type | enable | icmp-maxlength icmp-maxlength} [rate count [per-second | per-minute | per-hour | per-day]] [nolog]
3	Optionally, set a logging event-rate for one or all DoS attack types, specifying the rate per specified time period.	hostdos mitigation-type event-rate count {per-seconds | per-minutes | per-hours | per-days}
4	Optionally, disable logging for the specified DoS attack types.	hostdos mitigation-type nolog
5	Optionally, specify an ICMP maximum packet size for icmpsize mitigation.	hostdos icmpsize maxlength length

Managing TACACS+ describes how to display Host DoS configuration state and counters on an S- K- and 7100-Series device.

Displaying Host DoS

Step	Task	Command(s)
1	Display configuration state for one or all Host DoS attack mitigation types.	show hostdos [mitigation-type]
2	Display statistic counters for one or all Host DoS attack mitigation types.	show hostdos [mitigation-type] [stats]