Filter
Top Products
DES-7200 Configuration Guide Chapter 12 NFPP Configuration
12-84
Command Function
DES-7200# clear nfpp define
hosts name [vlan vid] [interface
interface-id] [ip-address]
[mac-address]
The parameters define the specific hosts to be
cleared.
12.9.1.11 Showing Defined-guard
12.9.1.11.1 Showing defined guard configuration
Execute "show nfpp define summary" command to display defined guard configurations:
Command Function
DES-7200#show nfpp define
summary [name]
Display defined guard configurations. If "name" is
not specified, the configurations of all defined guard
policies will be displayed.
An example is shown below:
DES-7200# show nfpp define summary tcp
Define tcp summary:
match etype 0x0800 protocol 0x06
Maximum count of monitored hosts: 1000
Monitor period：300s
（Format of column Rate-limit and Attack-threshold is per-src-ip/per-src-ma
c/per-port.）
Interface Status Isolate-period Rate-limit Attack-threshold
Global Enable 300 -/5/150 -/10/300
G 0/1 Enable 180 -/6/- -/8/-
G 0/2 Disable 200 -/5/30 -/10/50
12.9.1.11.2 Showing information about monitored hosts
Command Function
DES-7200# show nfpp define
hosts name [statistics | [[vlan
vid] [interface interface-id]
[ip-address] [mac-address]]]
Display hosts detected to be under attack.
If no parameter is specified, all hosts detected to
be under attack will be displayed. The
parameters define the specific hosts to be
displayed.
An example is shown below:
DES-7200#show nfpp define hosts tcp statistics
Define tcp: