Radware Alteon, Инструкция по применению

Страница: 621 / 842

Alteon Application Switch Operating System Application Guide
Advanced Denial of Service Protection
Document ID: RDWR-ALOS-V2900_AG1302
621
Matching and Denying a UDP Pattern Group
The following is an example configuration for matching an denying a UDP pattern group.
To match and deny a UDP pattern group
1. Configure a list of SLB strings containing binary patterns and offset pairs.
This example illustrates adding one binary pattern and one ASCII string pattern. The binary
pattern is written in hexadecimal notation.
2. Identify the IDs of the defined strings.
The strings in bold are used in this example. Number of entries: 10
>> /cfg/slb/layer7/slb/addstr
Enter type of string [l7lkup|pattern]: pattern
Enter match pattern type [ascii|binary]: binary
(Add the first pattern)
(Select binary matching)
Enter HEX string: 014F
(For this binary pattern)
Enter offset in bytes from start of IP frame (0-
1500): 2
Enter depth in bytes to search from offset (0-
1500): 0 )
(Starting from third byte)
(Search length of the pattern
Enter operation (eq|gt|lt): eq
(For values equal to this binary
pattern)
>> Server Loadbalance Resource# add
Enter type of string [l7lkup|pattern]: pattern
Enter match pattern type [ascii|binary]: ascii
Enter ASCII string: /default.htm )
Enter offset in bytes from start of IP frame (0-
1500): 44
Enter depth in bytes to search from offset (0-
1500): 30
(Add the second pattern)
(Select ASCII matching)
(Match this ASCII string)
(Search from 45th byte)
(through the 30th byte)
>> Server Loadbalance resource# cur
ID SLB String
1
ida
2
%c1%9c
3
%c0%af
4
playdog.com
6
HTTPHDR:Host:
www.playdog.com
7
HTTPHDR:SoapAction=*
8
BINMATCH=014F, offset=2, depth=0, op=eq, cont 256
9
STRMATCH=/default.htm offset=44, depth=30, op=eq, cont 256