Ruijie RG-S2600G-I Series, Cli Reference Manual

Page: 865 / 1192

CLI Reference NFPP Configuration Commands
recognize the host based on the source IP address/
source MAC address for the user-defined packets rate
statistics based on the user / port and specify the rate-limit
threshold and attack threshold for each classification. The
rate-limit threshold shall be equal to or greater than the
attack threshold. If the rate is greater than the rate-limit
threshold, the packets that meet this classification rule will
be discarded. If the rate exceeds the attack threshold, the
user will be regarded as an attacker. The log will be
printed and the trap will be sent. For the classification
based on the user, the user will be isolated according to
the isolate period.
Examples
Ruijie(config)# nfpp
Ruijie(config-nfpp)# nfpp define tcp
Ruijie(config-nfpp-define)# global-policy per-src-ip 10 20
Ruijie(config-nfpp-define)# global-policy per-port 100 200
Related
commands
Command Description
nfpp
defin
e
name
polic
y
Set the rate-limit threshold and
attack threshold.
sho
w
nfpp
defin
e
sum
mary
Show the user-defined anti-attack
configurations
nfpp define name enable
Use this command to enable the user-defined anti-attack function on the interface.
nfpp define name enable
Parameter
description
Parameter Description
name
Name of the user-defined anti-attack
type
Default
Settings N/A