[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

syn-flood

Syntax



syn-flood {
alarm-threshold 
            number
          ;
attack-threshold 
            number
          ;
destination-threshold 
            number
          ;
source-threshold 
            number
          ;
timeout 
            seconds
          ;
}

Hierarchy Level



[edit security screen ids-option 
          screen-name
         tcp]

Release Information

Statement introduced in Release 8.5 of JUNOS software.

Description

Configure detection and prevention of SYN flood attacks. Such attacks occur when the connecting host continuously sends TCP SYN requests without replying to the corresponding ACK responses.

This statement is supported on J-series and SRX-series devices.

Options

The remaining statements are explained separately.

Usage Guidelines

For configuration instructions and examples, see the JUNOS Software Security Configuration Guide.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]