Ruijie Networks RG-S2600E Series, Cli Reference Manual

Page: 812 / 1191

S2600E CLI Reference Guide Chapter 15 NFPP Configuration Commands
15.5.1 icmp-guard
attack-threshold
Use this command to set the global attack threshold. When the packet rate exceeds the attack
threshold, the attack occurs.
icmp-guard attack-threshold { per-src-ip | per-port } pps
Parameter Description
per-src-ip
Set the attack threshold for each
source IP address.
per-port Set the attack threshold for each port.
Parameter
description
pps
Set the attack threshold, in pps. The
valid range is [1,9999].
Default
Settings
By default, the attack threshold and the rate-limit threshold
for each source IP address and each port are the same.
For the default rate-limit threshold value, see the
icmp-guard rate-limit command.
Command
mode NFPP configuration mode.
Usage
guidelines N/A.
Examples
Ruijie(config)# nfpp
Ruijie(config-nfpp)# icmp-guard attack-threshold
per-src-ip 600
Ruijie(config-nfpp)# icmp-guard attack-threshold
per-port 1200
Command Description
nfpp icmp-guard policy
Show the rate-limit threshold
and attack threshold.
show nfpp icmp-guard
summary
Show the configurations.
Related
commands
show nfpp icmp-guard
hosts
Show the monitored host list.