Specifications

2-31
Cisco SCE 2000 and SCE 1000 CLI Command Reference
OL-26797-03
Chapter 2 CLI Command Reference
attack-filter dont-filter | force-filter
attack-filter dont-filter | force-filter
This command prevents attack filtering for a specified IP address/protocol. If filtering is already in
process, it will be stopped. When attack filtering has been stopped, it remains stopped until explicitly
restored by another CLI command (either specific or general). Use the no form of this command to
restore attack filtering. The force-filter keyword forces attack filtering for a specified IP
address/protocol. When attack filtering has been forced, it continues until explicitly stopped by another
CLI command (either specific or general). Use the no form of this command to stop attack filtering.
attack-filter force-filter action (block|report) protocol ((TCP|UDP) [dest-port (port-number
|not-specific)]|ICMP|other) attack-direction
(((single-side-source|single-side-destination|single-side-both) ip ip-address )|(dual-sided
source-ip ip-address destination-ip ip-address )) side side
attack-filter dont-filter protocol ((TCP|UDP) [dest-port (port-number
|not-specific)]|ICMP|other) attack-direction
(((single-side-source|single-side-destination|single-side-both) ip ip-address )|(dual-sided
source-ip ip-address destination-ip ip-address )) side side
no attack-filter dont-filter protocol ((TCP|UDP) [dest-port (port-number
|not-specific)]|ICMP|other) attack-direction
(((single-side-source|single-side-destination|single-side-both) ip ip-address )|(dual-sided
source-ip ip-address destination-ip ip-address )) side side
no attack-filter force-filter protocol ((TCP|UDP) [dest-port (port-number
|not-specific)]|ICMP|other) attack-direction
(((single-side-source|single-side-destination|single-side-both) ip ip-address )|(dual-sided
source-ip ip-address destination-ip ip-address )) side side
no attack-filter force-filter all
no attack-filter dont-filter all
Syntax Description action (force-filter
command only)
Specifies the action the force-filter command should perform:
• block
• report
protocol TCP, UDP, ICMP, or Other
destination port (TCP and UDP protocols only): Defines whether specific IP detection is
forced or prevented for the specified port number or is port-less
(non-specific).
port-number, not-specific
attack direction Defines whether specific IP detection is forced or prevented for single-sided
or dual-sided attacks.
• Single-sided: specify the direction (single-side-source,
single-side-destination, single-side-both) and the IP address.
• Dual-sided: Specify 'dual-sided' and both the source and the
destination IP addresses.