Specifications

2-21
Cisco SCE 2000 and SCE 1000 CLI Command Reference
OL-26797-03
Chapter 2 CLI Command Reference
attack-detector default
The following arguments are optional:
• action
• open-flows
• ddos-suspected-flows
• suspected-flows-ratio
Use the optional keywords as follows:
• Use the notify-subscriber keyword to enable subscriber notification.
• Use the dont-notify-subscriber keyword to disable subscriber notification.
• Use the alarm keyword to enable sending an SNMP trap.
• Use the no-alarm keyword to disable sending an SNMP trap.
Use the attack-detector <number> command to configure a specific attack detector.
Authorization: admin
Examples The following examples illustrate the use of the attack-detector default command:
EXAMPLE 1
The following example configures a default attack detector for TCP flows from the attack source.
SCE>enable 10
Password:<cisco>
SCE#config
SCE(config)#interface LineCard 0
SCE(config if)#attack-detector default protocol TCP attack-direction attack-source side
both action report open-flows 500 ddos-suspected-flows 75 suspected-flows-ratio 50

SCE(config if)#
EXAMPLE 2
The following example enables subscriber notification for the specified default attack detector.
SCE>enable 10
Password:<cisco>
SCE#config
SCE(config)#interface LineCard 0
SCE(config if)#attack-detector default protocol TCP attack-direction attack-source side
both notify-subscriber 
SCE(config if)#
Related Commands Command Description
attack-detector <number> Configures a specific attack detector for a particular
attack type (protocol/attack direction/side) with the
assigned number.
attack-filter subscriber-notification ports Specifies a port as subscriber notification port.
show interface LineCard attack-detector Displays the configuration of the specified attack
detector.