< Home

firewall defend land enable

Function

The firewall defend land enable command enables the Land attack defense.

The undo firewall defend land enable command disables the Land attack defense.

Format

firewall defend land enable

undo firewall defend land enable

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

By default, the Land attack defense is disabled.

After Land attack defense is configured, the device checks whether the source and destination IP addresses of a TCP packet are the same, or whether the source IP address of the TCP packet is a loopback address. If yes, the packet is discarded.

Example

# Enable the Land attack defense.

<sysname> system-view
[sysname] firewall defend land enable
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >