Specifications

2-30
Cisco SCE 2000 and SCE 1000 CLI Command Reference
OL-26797-03
Chapter 2 CLI Command Reference
attack-filter
• For a selected attack direction, either for all protocols or for a selected protocol.
If the selected protocol is either TCP or UDP, specify whether the destination port is specific
(port-based), not specific (port-less), or both. If the destination port or ports are specific, the specific
destination ports are configured using the attack-detector TCP-port-list|UDP-port-list,
page 2-27command.
Authorization: admin
Examples The following examples illustrate the use of this command.
EXAMPLE 1
The following example shows how to enable specific, dual-sided attack detection for TCP protocol only.
SCE>enable 10
Password:<cisco>
SCE#config
SCE(config)#interface LineCard 0
SCE(config if)#attack-filter protocol TCP dest-port specific attack-direction dual-sided

SCE(config if)#
EXAMPLE 2
The following example shows how to enable single-sided attack detection for ICMP protocol only.
SCE>enable 10
Password:<cisco>
SCE#config
SCE(config)#interface LineCard 0
SCE(config if)# attack-filter protocol ICMP attack-direction single-side-source

SCE(config if)#
EXAMPLE 3
The following example disables attack detection for all non TCP, UDP, or ICMP protocols.
SCE>enable 10
Password:<cisco>
SCE#config
SCE(config)#interface LineCard 0
SCE(config if)#no attack-filter protocol other attack-direction all

SCE(config if)#
Related Commands Command Description
attack-detector
TCP-port-list|UDP-port-list
Defines the list of destination ports for specific port detections
for TCP or UDP protocols.
attack-detector <number> Configures a specific attack detector for a particular attack type
(protocol/attack direction/side) with the assigned number.
show interface LineCard
attack-filter
Displays the attack filtering configuration.