R0106-HP MSR Router Series Security Command Reference(V7)

572
MSR4000:
display attack-defense { ack-flood | dns-flood | fin-flood | flood | http-flood | icmpv6-flood | rst-flood
| syn-ack-flood | syn-flood | udp-flood } statistics ipv6 [ ipv6-address [ vpn vpn-instance-name ] ]
[ interface interface-type interface-number | local ] [ slot slot-number ] [ count ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
ack-flood: Specifies ACK flood attack.
dns-flood: Specifies DNS flood attack.
fin-flood: Specifies FIN flood attack.
flood: Specifies all IPv4 flood attacks.
http-flood: Specifies HTTP flood attack.
icmpv6-flood: Specifies ICMPv6 flood attack.
rst-flood: Specifies RST flood attack.
syn-ack-flood: Specifies SYN-ACK flood attack.
syn-flood: Specifies SYN flood attack.
udp-flood: Specifies UDP flood attack.
ipv6-address: Specifies an IPv6 address. If no IPv6 address is specified, this command displays flood
attack detection and prevention statistics for all IPv6 addresses.
interface interface-type interface-number: Specifies an interface by its type and number.
local: Specifies the device.
slot slot-number: Specifies a card by its slot number. This option is available only when you specify a
global interface, such as a VLAN interface or tunnel interface. If no card is specified, this command
displays IPv6 flood attack detection and prevention statistics on all cards. (MSR4000.)
count: Displays the number of matching protected IPv6 addresses.
Usage guidelines
The device collects statistics about protected IP addresses for flood attack detection and prevention. The
attackers' IP addresses are not recorded.
If the interface and local parameters are not specified, this command display IPv6 flood attack detection
and prevention statistics on all interfaces and the device.
Examples
# (MSR2000/MSR3000.) Display flood attack detection and prevention statistics for all IPv6 addresses.
<Sysname> display attack-defense flood statistics ipv6
IPv6 address VPN Detected on Detect type State PPS Dropped
2000::1011 a0123456789 GE2/1/2 SYN-FLOOD Normal 0 4294967295
1::2 1222232 GE2/1/2 DNS-FLOOD Normal 1000 111111111