fwaccel synatk

In the R81.10.X releases, this command is available starting from the R81.10.00 version.

Description

The "fwaccel synatk" and "fwaccel6 synatk" commands control the Accelerated SYN Defender on the local Security Gateway, or Cluster Member.

Important - See sk120476 for information about the 'SYN Attack' protection in SmartConsole.

Syntax for IPv4

fwaccel synatk

      -a

      -c <options>

      -d

      -e

      -g

      -m

      -t <options>

      allow <options>

      config

      monitor <options>

      state <options>

Syntax for IPv6

fwaccel6 synatk

      -a

      -c <options>

      -d

      -e

      -g

      -m

      -t <options>

      allow <options>

      config

      monitor <options>

      state <options>

Parameters

Parameter

Description

No Parameters

Shows the applicable built-in usage.

-a

Applies the configuration from the default file.

See fwaccel synatk -a.

-c <options>

Applies the configuration from the specified file.

See fwaccel synatk -c <Configuration File>.

-d

Disables the Accelerated SYN Defender on all interfaces.

See fwaccel synatk -d.

-e

Enables the Accelerated SYN Defender on interfaces with topology "External".

Enables the Accelerated SYN Defender in Monitor (Detect only) mode on interfaces with topology "Internal".

See fwaccel synatk -e.

-g

Enables the Accelerated SYN Defender on all interfaces.

See fwaccel synatk -g.

-m

Enables the Accelerated SYN Defender in Monitor (Detect only) mode on all interfaces.

In this state, the Accelerated SYN Defender only sends a log when it recognizes a TCP SYN Flood attack.

See fwaccel synatk -m.

-t <options>

Configures the threshold numbers of half-opened TCP connections that trigger the Accelerated SYN Defender.

See fwaccel synatk -t <Threshold>.

allow <options>

Controls the Accelerated SYN Defender whitelist.

See fwaccel synatk allow.

config

Shows the current Accelerated SYN Defender configuration.

See fwaccel synatk config.

monitor <options>

Shows the Accelerated SYN Defender status.

See fwaccel synatk monitor.

state <options>

Controls the Accelerated SYN Defender states.

See fwaccel synatk state.