Filter
Top Products
DES-7200 Configuration Guide Chapter 12 NFPP Configuration
12-25
Command Function
DES-7200(config)# ip-guard
attack-threshold per-src-ip pps
Configure the ip-guard attack threshold, ranging from
1 to 9999, 20 by default. When the IP packet number
sent from a host exceeds the attack threshold, the
attack is detected and IP-guard isolates the host,
records the message and sends the TRAP packet.
per-src-ip: detect the hosts based on the source IP
address/VID/port;
DES-7200(config)# ip-guard
scan-threshold pkt-cnt
Configure the ip-guard scan threshold, in 10s,
ranging from 1 to 9999, 100 by default.
DES-7200(config-nfpp)# end
Return to the privileged EXEC mode.
DES-7200# configure terminal
Enter the global configuration mode.
DES-7200(config)# interface
interface-name
Enter the interface configuration mode.
DES-7200(config-if)#nfpp ip-guard polic
y per-src-ip rate-limit-pps attack-threshol
d-pps
Configure the rate-limit and attack threshold on the
specified interface.
rate-limit-pps: set the rate-limit threshold. The valid
range is 1-9999 and by default, it adopts the global
rate-limit threshold value.
attack-threshold-pps: set the attack threshold. The
valid range is 1-9999 and by default, it adopts the
global attack threshold value.
per-src-ip: to detect the hosts based on the source
IP/VID/port;
DES-7200(config-if)#nfpp ip-guard scan
-threshold pkt-cnt
Configure the ip-guard scan threshold value on each
interface, the valid range is 1-9999, in 10s. By
default, it adopts the global arp-guard scan threshold
value.
DES-7200(config-nfpp)# end
Return to the privileged EXEC mode.
DES-7200(config-if)# show nfpp ip-guard
summary
Show the parameter settings.
DES-7200# copy running-config
startup-config
Save the configurations.