Security Commands 1027no dos-control tcpfragDefault ConfigurationDenial of Service is disabled.Command ModeGlobal Configuration modeUser GuidelinesThis command has no user guidelines.ExampleThe following example activates TCP Fragment Denial of Service protection.console(config)#dos-control tcpfragrate-limit cpuUse the rate-limit cpu command to reduce the amount of unknownunicast/multicast packets forwarded to the CPU on CoS queues 0 and 1.This command also configures the rate in packets-per-second for the numberof IPv4 and IPv6 data packets trapped to CPU when the packet fails to beforwarded in the hardware due to unresolved MAC address of the destinationIPv6 node. Packets exceeding the rate limit are silently discarded.Use the no form of the command to return the rate limit to the default value.Syntaxrate-limit cpu direction input pps pps-valueno rate-limit cpu direction input pps• pps-value—Range of 100-1024 packets per second (100-3000 for N4000switches)Default ConfigurationThe default is 1024 packets per second (3000 for N4000 switches)
