Radware Alteon, Инструкция по применению

Страница: 622 / 842

Alteon Application Switch Operating System Application Guide
Advanced Denial of Service Protection
622
Document ID: RDWR-ALOS-V2900_AG1302
3. From the Security menu, configure a pattern group and name it something relevant and easy to
remember.
4. Add the new pattern/offset pairs to the pattern group using their ID numbers.
Refer back to step 2 , where you typed the
cur
command, if you need to recall the ID number
associated with the SLB string.
5. Configure a filter and its appropriate protocol in which the patterns are found.
6. Configure the filter source and destination ports.
7. Configure the filter to deny.
8. Apply the pattern group you configured in step 3 and step 4 to the filter.
9. Enable pattern matching on the filter. This command enables Layer 7 lookup on the filter.
10. Apply the filter to the client port. If the incoming client requests enter Alteon on port 3, then add
this filter to port 3.
11. Apply and save the configuration.
>> /cfg/security/pggroup 1/name
(Name Pattern Group 1)
>> /cfg/security/pggroup 1/name
>> /cfg/security/pggroup 1/name
(Name the group)
>>Pattern Match Group 1# add 8
(Add the first binary pattern)
>>Pattern Match Group 1# add 8
(Add the ASCII string pattern)
>>/cfg/slb/filt 90
>>Filter 90 # proto tcp
>>Filter 90 # sport any
>>Filter 90 # dport http
>>Filter 90 # action deny
Current action: none
Pending new action: deny
>>Main# /cfg/slb/filt 90/adv/security/addgrp 1
>>Group ID 1 added.
>>/cfg/slb/filt 90/adv/security/pmatch enable
Current Pattern Match: disabled
New Pattern Match: enabled
>> # /cfg/slb/port 3
(Select the client port)
>> SLB Port 3# filt ena
(Enable filtering on the client port)
>> SLB Port 3# add 90
(Add Filter #90 to the client port)