Security Guide (Supporting ADX v03.1.00) Instruction Manual

16 Brocade Virtual ADX Security Guide
53-1003250-01
Transaction rate limit
1
Displaying TRL rules in a policy
You can display TRL rules in a policy as shown.
Syntax: show client-trl policy-name { ipv4 | ipv6} index
The policy-name variable specifies the TRL policy that you want to display rules for.
The show client-trl command displays entries in the TRL policy list, starting from the point specified
with the index parameter.
Displaying IP address with held down traffic
To display a list of IPv4 and IPv6 addresses whose traffic has been held down, enter commands
such as the following.
Syntax: rconsole slotnum cpunum
Syntax: show security holddown
The following table lists the output from the show security holddown command.
TABLE 1 Output from the show security holddown command
Field Description
source Source IPv4 or IPv6 address that is currently being held down
destination TCP, UDP, or ICMP depending on the type of traffic sent by the client.
vers Used by Brocade Technical Support.
attempt Number of connection attempts made by the client during the current monitoring interval.
start Time stamp representing the start of the monitoring interval.
last Time stamp representing the last time the
Brocade Virtual ADX received a connection
request from the client.
HD Whether the IP address is currently being held down. Y indicates that the address is being
held down. N indicates that it is not.
time Time remaining for this IP address to be held down, if the HD field contains Y.
Virtual ADX#show client-trl trl-policy1 ipv6 40
Max Count: 2500 Total Count: 2
IP address/Mask interval attempts holddown
--------------- -------- -------- --------
2001:db8::3a95/128 1 67 93
2001:db8::3a96/128 66 38 34
Virtual ADX# rconsole 2 1
Virtual ADX2/1 #show security holddown
source destination vers attempt start last HD time
192.168.2.30 Any tcp 0 000ab6ae 00000000 Y 9
192.168.2.40 Any tcp 0 000ab6ea 00000000 Y 9