disable ip-security anomaly-protection tcp flags
Disables TCP flag checking.
|slot||Specifies the slot to be used.|
|all||Specifies all IP addresses, or all IP addresses in a particular state.|
The default is disabled.
This command disables TCP flag checking. This checking takes effect for both IPv4 and IPv6 TCP packets. When enabled, the switch drops TCP packets if one of following condition is true:
TCP SYN flag==1 and the source port<1024
TCP control flag==0 and the sequence number==0
TCP FIN, URG, and PSH bits are set, and the sequence number==0
TCP SYN and FIN both are set.
This command was first available in ExtremeXOS 12.0.