Specifications

2-25
Cisco SCE 2000 and SCE 1000 CLI Command Reference
OL-26797-03
Chapter 2 CLI Command Reference
attack-detector <number>
Command Modes LineCard Interface Configuration
Command History This table includes the following release-specific history entries:
Usage Guidelines If a specific attack detector is defined for a particular attack type, it will override the configured default
attack detector.
The following arguments must always be specified:
• protocol
• attack-direction
• side
The following arguments are optional:
• action
• open-flows
• ddos-suspected-flows
• suspected-flows-ratio
Use the appropriate keyword to enable or disable subscriber notification by default:
• notify-subscriber : Enable subscriber notification.
• dont-notify-subscriber: Disable subscriber notification.
Use the appropriate keyword to enable or disable sending an SNMP trap by default:
• alarm : Enable sending an SNMP trap.
• no-alarm : Disable sending an SNMP trap.
If the selected protocol is either TCP or UDP, specify whether the destination port is specific, not
specific, or both. If the destination port or ports are specific, the specific destination ports are configured
using the attack-detector, page 2-22command.
Use the attack-detector, page 2-22command to enable a configured attack detector.
Use the attack-detector default, page 2-20command to configure a default attack detector.
Authorization: admin
Examples The following examples illustrate the use of the attack-detector <number> command:
EXAMPLE 1
The following example configures the attack detector number "2".
SCE>enable 10
Password:<cisco>
SCE#config
SCE(config)#interface LineCard 0
SCE(config if)# attack-detector 2 protocol UDP dest-port not-specific attack-direction
Release Modification
2.5.7 This command was introduced.