R0106-HP MSR Router Series Security Command Reference(V7)

580
# (MSR4000.) Display information about all IPv4 addresses protected by flood attack detection and
prevention in attack defense policy abc.
<Sysname> display attack-defense policy abc flood ip
Slot 0:
IP address VPN instance Type Rate threshold(PPS) Dropped
123.123.123.123 a012345678901234 SYN-ACK-FLOOD 100 4294967295
201.55.7.45 -- ICMP-FLOOD 100 10
192.168.11.5 -- DNS-FLOOD 23 100
Slot 1:
Totally 3 flood protected IP addresses.
IP address VPN instance Type Rate threshold(PPS) Dropped
123.123.123.123 a012345678901234 SYN-ACK-FLOOD 100 4294967295
201.55.7.45 -- ICMP-FLOOD 100 10
192.168.11.5 -- DNS-FLOOD 23 100
# (MSR2000/MSR3000.) Display the number of IPv4 addresses protected by flood attack detection and
prevention in attack defense policy abc.
<Sysname> display attack-defense policy abc flood ip count
Totally 3 flood protected IP addresses.
# (MSR4000.) Display the number of IPv4 addresses protected by flood attack detection and prevention
in attack defense policy abc.
<Sysname> display attack-defense policy abc flood ip count
Slot 0:
Totally 3 flood protected IP addresses.
Slot 1:
Totally 3 flood protected IP addresses.
Table 85 Command output
Field Descri
p
tion
Totally 3 flood protected IP
addresses
Total number of the IPv4 addresses protected by flood attack detection and
prevention.
IP address Protected IPv4 address.
VPN instance
MPLS L3VPN instance to which the protected IPv4 address belongs. If the
protected IPv4 address is on the public network, this field displays hyphens
(--).
Type Type of the flood attack.
Rate threshold(PPS)
Threshold for triggering the flood attack prevention, in units of packets sent
to the IP address per second.
Dropped
Number of dropped attack packets. If the prevention action is logging, this
field displays 0.
display attack-defense policy ipv6
Use display attack-defense policy ipv6 to display information about IPv6 addresses protected by flood
attack detection and prevention.