Network Attack Prevention Configuration
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
695
Alcatel-Lucent
Beta
Beta
CLI Configuration Guide
S
AMPLE
F
IREWALL
P
OLICY
C
ONFIGURATIONS
ON
OA-700
E
XAMPLE
1
As the default setting, detection of all stateless attacks with logging is applied at
the ingress path of all interfaces. To be exact, the following is the default setting
for a brand new box out of factory:
match-list everything
ip any any type any
firewall
attack a1
default stateless
policy p1
match everything attack a1 reset
interface GigabitEthernet7/0
firewall policy in p1
E
XAMPLE
2
This example checks traffic from outside-zone to inside-zone for attacks defined in
“d1”. If found, TCP RST will be sent to both source and destination for TCP traffic.
Packets will be dropped for non-TCP traffic.
list outside-zone interface GigabitEthernet7/0
GigabitEthernet3/0
list inside-zone interface GigabitEthernet7/1
match-list m1
tcp list outside-zone list inside-zone type ftp
firewall
attack d1
default
policy p1
match m1 attack d1 reset
interface GigabitEthernet7/0
firewall policy in p1
Summary of Contents for OmniAccess 700
Page 38: ...Left running head Chapter name automatic 12 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 176: ...Left running head Chapter name automatic 150 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 260: ...Left running head Chapter name automatic 234 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 434: ...Left running head Chapter name automatic 408 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 464: ...Left running head Chapter name automatic 438 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 638: ...Left running head Chapter name automatic 612 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 940: ...Left running head Chapter name automatic 914 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 1002: ...Left running head Chapter name automatic 976 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 1120: ...Left running head Chapter name automatic 2 Beta Beta CLI Configuration Guide Alcatel Lucent ...