Specifications

2-29
Cisco SCE 2000 and SCE 1000 CLI Command Reference
OL-26797-03
Chapter 2 CLI Command Reference
attack-filter
attack-filter
Enables specific attack detection for a specified protocol and attack direction. Use the no form of the
command to disable attack detection.
attack-filter protocol (((TCP|UDP) [dest-port destination port ])|ICMP|other|all)
attack-direction attack-direction
no attack-filter protocol (((TCP|UDP) [dest-port destination port ])|ICMP|other|all)
attack-direction attack-direction
Syntax Description
Command Default By default, attack-filter is enabled.
Default protocols = all protocols (no protocol specified)
Default attack direction = all directions
Default destination port = both port-based and port-less
Command Modes LineCard Interface Configuration
Command History This table includes the following release-specific history entries:
Usage Guidelines Specific attack filtering is configured in two steps:
• Enabling specific IP filtering for the particular attack type (using this command).
• Configuring an attack detector for the relevant attack type (using the attack-detector <number>,
page 2-24command). Each attack detector specifies the thresholds that define an attack and the
action to be taken when an attack is detected.
In addition, the user can manually override the configured attack detectors to either force or prevent
attack filtering in a particular situation (using the attack filter force filter | don't-filter command).
By default, specific-IP detection is enabled for all attack types. You can configure specific IP detection
to be enabled or disabled for a specific, defined situation only, depending on the following options:
• For a selected protocol only.
• For TCP and UDP protocols, for only port-based or only port-less detections.
protocol TCP, UDP, IMCP, other
destination port {TCP and UDP protocols only): Defines whether the default attack detector
applies to specific (port-based) or not specific (port-less) detections.
specific, not-specific, both
attack-direction single-side-destination, single-side-both, dual-sided, all
Release Modification
2.5.7 This command was introduced.