Ruijie RG-S29 Series, Справочник по командам

Страница: 1257 / 1510

Configuration Guide NFPP Commands
21.74 nfpp icmp-guard policy
Use this command to set the rate-limit threshold and the attack threshold.
Use the no or default form of this command to restore the default setting.
nfpp icmp-guard policy { p er-src-ip | per-port } rate-limit-pps attack-threshold-pps
no nfpp icmp-guard policy { per-src-ip | per-port }
default nfpp icmp-guard policy { per-src-ip | per-port }
Parameter
Description
Parameter Description
per-src-ip
Sets the rate-limit threshold and the attack threshold for each source
IP address.
per-port Sets the rate-limit threshold and the attack threshold for each port.
rate-limit-pps Sets the rate-limit threshold, in the range from1 to 19,999.
attack-threshold-pps Sets the attack threshold, in range from1 to 19,999.
Defaults By default, the rate-limit threshold and the attack threshold are not configured.
Command
Mode
Interface configuration mode
Usage Guide The attack threshold value shall be equal to or greater than the rate-limit threshold.
Configuration
Examples
The following example sets the rate-limit threshold and the attack threshold.
Ruijie(config)# interface G 0/1
Ruijie(config-if)# nfpp icmp-guard policy per-src-ip 5 10
Ruijie(config-if)# nfpp icmp-guard policy per-port 100 200
Related
Commands
Command Description
icmp-guard attack-threshold
Sets the global attack threshold.
icmp-guard rate-limit Sets the global rate-limit threshold.
show nfpp icmp-guard summary Displays the configuration.
show nfpp icmp-guard hosts Displays the monitored host.
clear nfpp icmp-guard hosts
Clears the isolated host.
Platform
Description
N/A
21.75 nfpp ip-guard enable
Use this command to enable the IP anti-attack function on the interface.
Use the no or default form of this command to restore the default setting.