10-15
Cisco SCE8000 Software Configuration Guide, Rel 3.1.6S
OL-16479-01
Chapter 10 Identifying and Preventing Distributed-Denial-Of-Service Attacks
Configuring Attack Detectors
How to Define the List of Destination Ports for TCP or UDP Protocols for a Specific Attack Detector
Use the following command to define the list of destination ports for specific port detections for TCP or
UDP protocols.
Step 1
From the SCE(config if)# prompt, type
attack-detector
number
TCP-port-list|UDP-port-list
(all|(
port1
[,
port2, port3…
])
and press
Enter
.
Defines the port list for the specified protocol and attack detector.
How to Delete User-Defined Values
Use the following command to remove settings of action, thresholds, subscriber notification, and
sending an SNMP trap for a specific attack detector and selected set of attack types.
Removing these settings for a given attack type restores them to the default 'not configured' state, which
means that the attack detector does not take part in determining the response for attacks of this attack
type.
Step 1
From the SCE(config if)# prompt, type
default attack-detector
number
protocol (((TCP|UDP)
[dest-port (specific|not- specific|both)])|ICMP|other|all) attack-direction
(single-side-source|single-side-destination|single-side-both|dual-sided|all) side
(subscriber|network|both)
and press
Enter
.
Defines the action of the specified attack detector.
How to Disable a Specific Attack Detector
Use the following command to disable a specific attack detector, configuring it to use the default action,
threshold values and subscriber notification for all protocols, attack directions and sides.
Step 1
From the SCE(config if)# prompt, type
default attack-detector
number
and press
Enter
.
Disables the specified attack detector.
How to Disable All Non-default Attack Detectors
Use the following command to disable all non-default attack detectors, configuring them to use the
default values.
Step 1
From the SCE(config if)# prompt, type
default attack-detector all-numbered
and press
Enter
.
Disables all non-default attack detectors.
