Ruijie Networks RG-S2600E Series, Справочное руководство CLI

Страница: 835 / 1191

S2600E CLI Reference Guide Chapter 15 NFPP Configuration Commands
packets.
rate-limit-pps
Set the rate-limit threshold.
attack-threshold-pps
Set the attack threshold.
Default
Settings N/A.
Command
mode NFPP define configuration mode.
Usage
guidelines
To create a user-defined anti-attack type, the classification
rule for the rate statistics must be specified, that is,
recognize the host based on the source IP address/
source MAC address for the user-defined packets rate
statistics based on the user / port and specify the rate-limit
threshold and attack threshold for each classification. The
rate-limit threshold shall be equal to or greater than the
attack threshold. If the rate is greater than the rate-limit
threshold, the packets that meet this classification rule will
be discarded. If the rate exceeds the attack threshold, the
user will be regarded as an attacker. The log will be
printed and the trap will be sent. For the classification
based on the user, the user will be isolated according to
the isolate period.
Examples
Ruijie(config)# nfpp
Ruijie(config-nfpp)# nfpp define tcp
Ruijie(config-nfpp-define)# global-policy per-src-ip 10
20
Ruijie(config-nfpp-define)# global-policy per-port 100
200
Command Description
nfpp define name
policy
Set the rate-limit threshold and
attack threshold.
Related
commands
show nfpp define
summary
Show the user-defined anti-attack
configurations