DES-7200 Configuration Guide Chapter 12 NFPP Configuration
12-54
Host-based rate-limit and attack detection
Port-based rate-limit and attack detection
Clearing monitored host
Showing related dhcpv6-guard information
12.7.2 Enabling
DHCPv6-guard
You can enable dhcpv6-guard in the nfpp configuration mode or in the interface configuration
mode. By default, the dhcpv6-guard is enabled.
Command Function
DES-7200# configure terminal
Enter the global configuration mode.
DES-7200(config)# nfpp
Enter the nfpp configuration mode.
DES-7200(config-nfpp)# dhcpv6-guard
enable
Enable the dhcpv6-guard. By default, dhcpv6-guard
is enabled.
DES-7200(config-nfpp)# end
Return to the privileged EXEC mode.
DES-7200# configure terminal
Enter the global configuration mode.
DES-7200# interface interface-name
Enter the interface configuration mode.
DES-7200(config-if)# nfpp dhcpv6-guard
enable
Enable the dhcpv6-guard on the interface. By default,
dhcpv6-guard is not enabled on the interface.
DES-7200(config-if)# end
Return to the privileged EXEC mode.
DES-7200# show nfpp dhcpv6-guard
summary
Show the configurations.
DES-7200# copy running-config
startup-config
Save the configurations.
Caution
With the dhcpv6-guard disabled, the monitored hosts are auto-cleared.
12.7.3 Configuring the
isolated time
For the isolated time of the attacker, it can be configured in the global or interface configuration