Ruijie Networks RG-S2600E Series, Cli Reference Manual

Page: 834 / 1191

S2600E CLI Reference Guide Chapter 15 NFPP Configuration Commands
Command
mode NFPP define configuration mode.
Usage
guidelines
The administrator can use this command to set the trusted
host free from monitoring. The ICMP packets are allowed
to sent to the trusted host CPU without any rate-limit and
warning configuration. Configure the mask to set all hosts
in one network segment free from monitoring.
UP to 500 trusted hosts are supported.
Before configuring the trusted-host, the match type must
be configured. If the message type configured by the
match is Ipv4, the Ipv6 trusted addresses are not allowed.
In the same way, if the message type is IPv6, the IPv4
trusted addresses are not allowed.
Examples
Ruijie(config)# nfpp
Ruijie(config-nfpp)# define tcp
Ruijie(config-nfpp-define)# trusted-host 1.1.1.1
255.255.255.255
Command Description
Related
commands
show nfpp define
trusted-host
Show the trusted host
configurations.
15.7.9 global-policy
Use this command to set the rate-limit threshold and attack threshold based on the host or
port.
global-policy {per-src-mac | per-src-ip | per-port} rate-limit-pps attack-threshold-pps
Parameter Description
per-src-ip
Perform the rate statistics based on
the source IP / VID and port.
per-src-mac
Perform the rate statistics based on
the source MAC / VID and port.
Parameter
description
per-port
Perform the rate statistics based on
each physical port of receiving the