R3204P16-HP Load Balancing Module Security Configuration Guide-6PW101

24
Figure 24 ICMP flood detection configuration page
Do the following to configure ICMP flood detection:
1. In the Attack Prevention Policy area, specify the protection action to be taken upon detection of an
ICMP flood attack. If you do not select the Discard packets when the specified attack is detected
option, the module only collects ICMP flood attack statistics.
2. In the ICMP Flood Configuration area, view the configured ICMP flood detection rules, or click Add
to enter the page shown in Figure 25 to
configure an ICMP flood detection rule.
Figure 25 Add an ICMP flood detection rule
Table 10 describes the configuration items.
Table 10 ICMP flood detection configuration items
Item Descri
p
tion
Protected Host
Configuration
IP Address Specify the IP address of the protected host.
Connection Rate
Threshold
Set the maximum ICMP connection rate for the IP address.
Global Configuration
of Security Zone
Connection Rate
Threshold
Set the global maximum ICMP connection rate for each host in
the current security zone.