DES-7200 Configuration Guide Chapter 12 NFPP Configuration
12-73
DES-7200(config-nfpp)#isolate-p
eriod {seconds | permanent}
Configure attacker isolation period
Range: 0 and 30-86400 seconds (i.e., one
day); default value is 0 second, meaning no
isolation; permanent means permanent
isolation.
DES-7200(config-nfpp)#end
Return to privilege mode.
DES-7200#configure terminal
Enter global configuration mode.
DES-7200(config)#interface
interface-name
Enter interface configuration mode.
DES-7200(config-if)# nfpp define
name isolate-period {seconds |
permanent}
Configure attacker isolation period on the port.
Range: 0 and 180-86400 seconds (i.e., one
day). By default, the local isolation period is not
configured, and the global isolation period will
be used. The value of 0 means no isolation,
and permanent means permanent isolation.
DES-7200(config-if)#end
Return to privileged mode.
DES-7200#show nfpp define
summary name
Verify configurations.
DES-7200#copy running-config
startup-config
Save configurations.
To restore global isolation period to the default value, execute "no isolate-period" command
in NFPP defined guard configuration mode. If one port has been configured with local isolation
period and it is now expected to apply the global isolation period, execute "no nfpp define
name (name of defined guard) isolate-period" in interface configuration mode to delete the
configuration of local isolation period.
12.9.1.4 Configuring Attacker Monitoring Period
If the isolation period is 0 (i.e., no isolation), the guard module will automatically monitor the
attacker as per the monitoring period configured and provide information about the existing
attackers in the system. When the isolation period is configured to a non-zero value, the guard
module will automatically isolate the host being monitored.
Command Function
DES-7200#configure terminal
Enter global configuration mode.
DES-7200(config)#nfpp
Enter NFPP configuration mode.
DES-7200(config-nfpp)#define
name
Enter defined guard configuration mode