Filter
Top Products
DES-7200 Configuration Guide Chapter 12 NFPP Configuration
12-66
RA-REDIRECT DoS attack was detected on port Gi4/1.
This section shows the administrator how to configure the port-based rate-limit and attack
detection in the nfpp configuration mode and in the interface configuration mode:
Command Function
DES-7200# configure terminal
Enter the global configuration mode.
DES-7200(config)# nfpp
Enter the nfpp configuration mode.
DES-7200(config)# nd-guard rate-limit
per-port [ns-na | rs | ra-redirect] pps
Configure the rate-limit of the ND packets on the port,
ranging from 1 to 9999, 15 by default.
DES-7200(config)# nd-guard
attack-threshold per-port [ns-na | rs |
ra-redirect] pps
Configure the attack threshold, ranging from 1 to
9999, 30 by default.
When the ND packet number on a port exceeds the
attack threshold, the CLI prompts and the TRAP
packets are sent.
DES-7200(config-nfpp)# end
Return to the privileged EXEC mode.
DES-7200# configure terminal
Enter the global configuration mode.
DES-7200(config)# interface
interface-name
Enter the interface configuration mode.
DES-7200(config-if)# nfpp nd-guard policy
per-port [ns-na | rs | ra-redirect]
rate-limit-pps attack-threshold-pps
Configure the rate-limit and attack threshold on the
specified interface.
rate-limit-pps: set the rate-limit threshold. The valid
range is 1-9999.
attack-threshold-pps: set the attack threshold. The
valid range is 1-9999.
DES-7200(config-nfpp)# end
Return to the privileged EXEC mode.
DES-7200(config-if)# show nfpp nd-guard
summary
Show the parameter settings.
DES-7200# copy running-config
startup-config
Save the configurations.
12.8.4 Showing
dhcpv6-guard
Showing ND-guard configuration