Specifications

2-32
Cisco SCE 2000 and SCE 1000 CLI Command Reference
OL-26797-03
Chapter 2 CLI Command Reference
attack-filter dont-filter | force-filter
Command Default This command has no default settings.
Command Modes Linecard Interface Configuration
Command History This table includes the following release-specific history entries:
Usage Guidelines After configuring the attack detectors, the SCE platform automatically detects attacks and handles them
according to the configuration. However, there are scenarios in which a manual intervention is desired,
either for debug purposes, or because it is not trivial to reconfigure the SCE attack-detectors properly.
The user can use the CLI attack filtering commands to do the following:
• Prevent/stop filtering of an attack related to a protocol, direction and specified IP address.
• Force filtering (with a specific action) of an attack related to a protocol, direction and specified IP
address.
Attack filtering can be prevented for a specified IP address/protocol by executing a dont-filter CLI
command. If filtering is already in process, it will be stopped. When attack filtering has been stopped, it
remains stopped until explicitly restored by another CLI command (either force-filter or no dont-filter).
Attack filtering can be forced for a specified IP address/protocol. Forced attack filtering will continue
until undone by an explicit CLI command (either no force-filter or dont-filter).
Use the all keyword to restore or stop all filtering.
Authorization: admin
Examples The following are examples of the attack-filter command:
EXAMPLE 1
The following example prevents attack filtering for the specified conditions.
SCE>enable 10
Password:<cisco>
SCE#config
SCE(config)#interface linecard 0
SCE(config if)#attack-filter dont-filter protocol other attack-direction
single-side-source ip 10.10.10.10 side both

SCE(config if)#
ip-address IP address from which traffic will not be filtered.
• For single-sided filtering, only one IP address is specified.
• For dual-sided filtering, both a source IP address and a destination IP
address are specified.
side subscriber, network, both
Release Modification
3.1.0 This command was introduced.