Extreme Networks ExtremeWare 7.3.0, Command Reference Manual

Page: 898 / 2254

898 ExtremeWare Software 7.3.0 Command Reference Guide
Security Commands
enable enhanced-dos-protect
enable enhanced-dos-protect {rate-limit | ipfdb} {ports [<portlist> | all]}
Description
Enables enhanced denial of service protection globally or for selected ports.
Syntax Description
Default
Default is disabled.
Usage Guidelines
Use the
rate-limit
keyword in this command to lower the percentage of slow path traffic being sent to
the CPU. Verify the enabled/disabled status by using the
show enhanced-dos-protect rate-limit
command.
Use the
ipfdb
keyword in this command to prevent IPFDB thrashing. Verify the enabled/disabled
status by using the
show enhanced-dos-protect ipfdb
command.
Example
The following command enables enhanced denial of service protection rate limiting for all ports.
enable enhanced-dos-protect rate-limit ports all
The following command globally enables the enhanced denial of service protection IPFDB learning
qualifier.
enable enhanced-dos-protect ipfdb
History
This command was first available in ExtremeWare 7.3.0
Platform Availability
This command is available on all platforms.
rate-limit Enables software rate limiting.
ipfdb Enables the IPFDB learning qualifier, resulting in reduction of IPFDB
thrashing.
portlist Specifies one or more ports or slots and ports. On a modular switch, can be a
list of slots a nd ports. On a stand-alone switch, can be one or more port
numbers. May be in the form 1, 2, 3-5, 2:*, 2:5, 2:6-2:8.
all Specifies all ports.