DES-7200 Configuration Guide Chapter 12 NFPP Configuration
12-79
DES-7200(config-if)#nfpp define name
policy {per-src-ip | per-src-mac}
rate-limit-pps attack-threshold-pps
The local rate-limiting threshold and
attack threshold configured will only
apply to the associated port.
per-src-ip means to take data rate
statistics of the host detected as per
source IP/VID/port, while per-src-mac
means to take data rate statistics of the
host detected as per source
MAC/VID/port.
Rate-limit-pps means the rate-limiting
threshold (1-9999). By default, no rate
limiting will be implemented. Packets
exceeding the rate-limiting threshold will
be discarded.
Attack-threshold-pps means the attack
threshold (1-9999). When the packets of
defined type exceed the attack
threshold, an attack is considered
existing and will be logged. The traps
will be sent and the user will be isolated
as per the isolation period configured.
By default, the globally configured
rate-limiting threshold and attack
threshold will be used.
The attack threshold must be greater
than or equal to the rate-limiting
threshold.
DES-7200(config-if)#end
Return to privileged mode.
DES-7200#show nfpp define summary
name
Verify configurations.
DES-7200#copy running-config
startup-config
Save configurations.