User guide

Appendix A
LineCard Interface Configuration Mode Commands
SCE 1000 2xGBE Release 2.0.10 User Guide
A-36 OL-7117-02
[no] attack-detector <number>
Configures a specific attack detector for a particular situation (protocol/attack direction/side) with
the assigned number.
Use the [no] version of this command to delete the specified attack detector.
Authorization admin
Mode LineCard Interface Configuration
P
ARAMETERS
protocol TCP
UDP
IMCP
other
attack-direction attack-source
attack-destination
both
side subscriber
network
both
action report
block
open-flows Threshold for concurrently open flows
ddos-suspected-flows Threshold for DDoS-suspected flows
U
SAGE GUIDELINES
• Use the notify-subscriber keyword to enable subscriber notification.
• Use the dont-notify-subscriber keyword to disable subscriber notification.
E
XAMPLE 1:
The following example configures the attack detector number "2".
SCE 1000(config if)#attack-detector 2 protocol TCP attack-direction attack-
source side both action report open-flows 500 ddos-suspected-flows 75
EXAMPLE 2:
The following example deletes attack detector number "2".
SCE 1000(config if)# no attack-detector 2
EXAMPLE 3:
The following example disables subscriber notification for attack detector number "2".
SCE 1000(config if)#attack-detector 2 dont-notify-subscriber