Extreme Networks ExtremeWare 7.3.0, Command Reference Manual

Page: 784 / 2254

784 ExtremeWare Software 7.3.0 Command Reference Guide
Security Commands
configure enhanced-dos-protect ipfdb learn-limit
configure enhanced-dos-protect ipfdb learn-limit <learn-limit> ports
<portlist>
Description
Configures the learning limit on untrusted ports for enhanced denial of service protection.
Syntax Description
Default
The default learn-limit on Fast Ethernet ports is 100 pkts/learn window.
The default learn-limit on Gigabyte ports is 100 pkts/learn window.
Usage Guidelines
Use this command to configure a learning limit value to define the number of packets to be counted
before ExtremeWare can create an IPFDB entry in the hardware.
To reset the learning limit for enhanced denial of service protection to default values for selected ports,
use the following command:
unconfigure enhanced-dos-protect ipfdb learn limit
Example
The following command configures the learn limit on port 3 at 75 packets within the learning window
before the IPFDB entry is created:
configure enhanced-dos-protect ipfdb learn-limit 75 ports 3
History
This command was first available in ExtremeWare 7.3.0
Platform Availability
This command is available on all platforms.
learn-limit Specifies the number of packets allowed on the selected ports within the
learning window before the rate limit is applied; or before the software can
create an IPFDB entry in the hardware. The valid value range is 100-1953125.
The default on Fast Ethernet ports is 100 pkts/learn window. The default on
Gigabyte ports is 100 pkts/learn window.
portlist Specifies one or more ports or slots and ports. On a modular switch, can be a
list of slots and ports. On a stand-alone switch, can be one or more port
numbers. May be in the form 1, 2, 3-5, 2:*, 2:5, 2:6-2:8.