894
Views
Attack defense policy view
Predefined user roles
network-admin
Parameters
port-list
: Specifies a space-separated list of up to 32 port number items. Each item specifies a port by
its port number or a range of ports in the form of
start-port-number
to
end-port-number
. The
end-port-number
cannot be smaller than the
start-port-number
.
Usage guidelines
The device detects only HTTP packets destined for the specified ports.
The global ports apply to global HTTP flood attack detection and IP address-specific HTTP flood
attack detection with no port specified.
Examples
# Specify the ports 80 and 8080 as the global ports to be protected against HTTP flood attacks in the
attack the defense policy
atk-policy-1
.
<Sysname> system-view
[Sysname] attack-defense policy atk-policy-1
[Sysname-attack-defense-policy-atk-policy-1] http-flood port 80 8080
Related commands
http-flood action
http-flood detect
http-flood detect non-specific
http-flood threshold
Use
http-flood threshold
to set the global threshold for triggering HTTP flood attack prevention.
Use
undo http-flood threshold
to restore the default.
Syntax
http-flood threshold threshold-value
undo http-flood threshold
Default
The global threshold is 1000 for triggering HTTP flood attack prevention.
Views
Attack defense policy view
Predefined user roles
network-admin
Parameters
threshold-value
: Specifies the threshold value. The value range is 1 to 1000000 in units of HTTP
packets sent to an IP address per second.
Usage guidelines
The global threshold applies to global HTTP flood attack detection. Adjust the threshold according to
the application scenarios. If the number of HTTP packets sent to a protected HTTP server is normally
Summary of Contents for FlexNetwork MSR Series
Page 1005: ...987 ...
