R2511-HP MSR Router Series Security Command Reference(V5)

496
conditions, or attack-sensitive networks, you can set a smaller action threshold. If the link bandwidth of
the protected network is small, you can set a smaller silence threshold to help release the network traffic
pressure.
Examples
# Configure UDP flood attack protection, set the global action threshold to 3000 packets per second and
the global silence threshold to 1000 packets per second.
<Sysname> system-view
[Sysname] attack-defense policy 1
[Sysname-attack-defense-policy-1] defense udp-flood rate-threshold high 3000 low 1000
Related commands
• defense udp-flood action drop-packet
• defense udp-flood enable
• display attack-defense policy
display attack-defense policy
Use display attack-defense policy to display configuration information about one or all attack protection
policies.
Syntax
display attack-defense policy [ policy-number ] [ | { begin | exclude | include } regular-expression ]
Views
Any view
Default command level
1: Monitor level
Parameters
policy-number: Specifies the sequence number of an attack protection policy, in the range of 1 to 128.
If you do not specify this argument, this command displays all brief information about attack protection
policies.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# Display configuration information about attack protection policy 1.
<Sysname> display attack-defense policy 1
Attack-defense Policy Information
------------------------------------------------------------
Policy number : 1
Bound interfaces : GigabitEthernet1/1
------------------------------------------------------------