set vpn site-to-site ike-dos-protection-unknown-sites

In the R81.10.X releases, this command is available starting from the R81.10.00 version.

Description

Controls the protection against IKE DoS from unidentified IP addresses.

Syntax

set vpn site-to-site advanced-settings ike-dos-protection-unknown-sites <method>

Parameters

Parameter

Description

<method>

Configures the IKE DoS protection and its detection method:

  • stateless - Detects potential attackers based on stateless cookies

  • puzzles - Detects potential attackers based on puzzles (stateless cookies are hidden in puzzles)

  • none - Disables the IKE DoS protection (this is the default)

Example Command

set vpn site-to-site advanced-settings ike-dos-protection-unknown-sites stateless