Avaya BSGX4e User's Guide download pdf (Page 149)

100

101

BSGX4e Business Gateway User Guide 149

Release 01.01 NN47928-102

Security Configuration

Show IDS Spoof Status

To see the interfaces on which IDS checks for spoof attacks, enter the following

command:

> show ids spoof

In the following example, IDS only checks for spoofs on the WAN interface, eth0.

IDS Spoofing:

Interface Type

------------------------------------------------------

eth0 untrusted

eth1 trusted

vif0 trusted

vpn0 trusted

IDS Statistics

This section shows how to view IDS statistics. IDS keeps a count for each type of

attack.

NOTE: To protect itself from being overwhelmed by a denial of service attack,

the IDS counter is limited to reporting 64 packets per second. Thus, the

actual packet rate can be greater than the value reported by the IDS

counter.

To see the IDS attack counts, enter the following command:

> show ids attacks

IDS Attacks:

Attack Count

-------------------------------------------------------------

PACKET ANOMALY

Layer 3

Land attack 0

IP with bad options 0

IP with unsupported options 0

Bad checksum 0

Bad TTL 0

Bad IP version 0

Bad IP length 0

Source IP is NULL 0

IP fragment too short 0

Layer 4

TCP no flags set (Null Scan) 0

TCP all flags set 0

TCP flags are nonsense 0

TCP SYN & FIN 0

TCP SYN with no ACK 0

1 2 ... 144 145 146 147 148 149 150 151 152 153 154 ... 455 456

Comments to this Manuals

No comments

Avaya BSGX4e User's Guide Page 149

Comments to this Manuals

Related products and manuals for Routers Avaya BSGX4e