R3303-HP HSR6800 Routers Security Command Reference

440
Related commands
• defense icmp-flood enable
• defense icmp-flood ip
• defense icmp-flood rate-threshold
• display attack-defense policy
defense icmp-flood enable
Use defense icmp-flood enable to enable ICMP flood attack protection.
Use undo defense icmp-flood enable to restore the default.
Syntax
defense icmp-flood enable
undo defense icmp-flood enable
Default
ICMP flood attack protection is disabled.
Views
Attack protection policy view
Default command level
2: System level
Examples
# Enable ICMP flood attack protection in attack protection policy 1.
<Sysname> system-view
[Sysname] attack-defense policy 1
[Sysname-attack-defense-policy-1] defense icmp-flood enable
Related commands
• defense icmp-flood action drop-packet
• defense icmp-flood ip
• defense icmp-flood rate-threshold
• display attack-defense policy
defense icmp-flood ip
Use defense icmp-flood ip to configure the action and silence thresholds for ICMP flood attack protection
of a specific IP address.
Use undo defense icmp-flood ip to remove the configuration.
Syntax
defense icmp-flood ip ip-address rate-threshold high rate-number [ low rate-number ]
undo defense icmp-flood ip ip-address [ rate-threshold ]