Filter
Top Products
DES-7200 Configuration Guide Chapter 12 NFPP Configuration
12-38
Command Function
DES-7200# configure terminal
Enter the global configuration mode.
DES-7200(config)# nfpp
Enter the nfpp configuration mode.
DES-7200(config)# icmp-guard rate-limit
per-port pps
Configure the icmp-guard rate-limit of the ICMP
packet on the port, ranging from 1 to 9999.
The default values vary with different products:
For DES-7200 series, different default values vary
with different CMs.
DES-7200(config)# icmp-guard
attack-threshold per-port pps
Configure the icmp-guard attack threshold, ranging
from 1 to 9999. The default value is the port-based
rate limit. When the ICMP packet number on a port
exceeds the attack threshold, the CLI prompts and
the TRAP packets are sent.
DES-7200(config-nfpp)# end
Return to the privileged EXEC mode.
DES-7200# configure terminal
Enter the global configuration mode.
DES-7200(config)# interface
interface-name
Enter the interface configuration mode.
DES-7200(config-if)#nfpp icmp-guard
policy per-port rate-limit-pps
attack-threshold-pps
Configure the rate-limit and attack threshold on the
specified interface.
rate-limit-pps: set the rate-limit threshold. The valid
range is 1-9999 and by default, it adopts the global
rate-limit threshold value.
attack-threshold-pps: set the attack threshold. The
valid range is 1-9999 and by default, it adopts the
global attack threshold value.
DES-7200(config-nfpp)# end
Return to the privileged EXEC mode.
DES-7200(config-if)# show nfpp
icmp-guard summary
Show the parameter settings.
DES-7200# copy running-config
startup-config
Save the configurations.
Caution
The source IP address-based rate limit takes precedence over port-based
rate limit.