Configuring Flooding a Network (DoS Attack)
Use the below configuration example for flooding a network (DoS Attack):
set security screen ids-option TCP-half-open tcp syn-flood alarm-threshold 1 set security screen ids-option TCP-half-open tcp syn-flood source-threshold 4 set security screen ids-option TCP-half-open tcp syn-flood destination-threshold 4 set security zones security-zone trust tcp-rst set security zones security-zone trust screen TCP-half-open set security zones security-zone trust host-inbound-traffic system-services all set security zones security-zone trust host-inbound-traffic protocols all set security zones security-zone trust interfaces ge-1/0/1.0 host-inbound-traffic system-services all