[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

Enabling Protection Against a Ping of Death Attack

A grossly oversized ICMP packet can trigger a range of adverse system reactions such as denial of service (DoS), crashing, freezing, and rebooting.

Before You Begin

For background information, read Understanding Ping of Death Attacks.

You can use either J-Web or the CLI configuration editor to enable protection against a ping of death attack. The specified zone is where the attack originates.

This topic covers:

J-Web Configuration

To configure screens:

  1. Select Configuration > View and Edit > Edit Configuration. The Configuration page appears.
  2. Next to Security, click Configure or Edit.
  3. Next to Screen, click Configure.
  4. Next to Ids option, click Add new entry.
  5. In the Name box, type ping-death.
  6. Next to Icmp, click Configure.
  7. Next to Ping death, select the check box and click OK.
  8. To save and commit the configuration, click Commit.

To configure zones:

  1. Select Configuration > View and Edit > Edit Configuration. The Configuration page appears.
  2. Next to Security, click Configure or Edit.
  3. Next to Zones, click Configure.
  4. Next to Security zone, click Add new entry.
  5. In the Name box, type zone.
  6. In the Screen box, type ping-death and click OK.
  7. To save and commit the configuration, click Commit.

CLI Configuration

user@host# set security screen ids-option ping-death icmp ping-death
user@host# set security zones security-zone zone screen ping-death

Related Topics

[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]