Maintaining Source Ip Attack Defense; Clearing The Statistics On Ip Source Trail; Configuration Examples - Huawei Quidway S9300 Configuration Manual

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
Prerequisite
The configurations of URPF are complete.
Procedure
l
----End
Example
Run the display this command to check whether URPF is enabled on GE 1/0/0.
[Quidway-GigabitEthernet1/0/0] display this
#
interface GigabitEthernet1/0/0
urpf loose allow-default-route
#
return

5.6 Maintaining Source IP Attack Defense

This section describes how to maintain source IP source attack defense.

5.6.1 Clearing the Statistics on IP Source Trail

5.6.1 Clearing the Statistics on IP Source Trail
Context
All the statistical entries on IP source trail are null upon query after the reset command is run to
clear the statistics on IP source trail.
Procedure
l
l
----End

5.7 Configuration Examples

This section provides a configuration example of IP source guard.
5.7.1 Example for Configuring IP Source Guard
5.7.2 Example for Configuring IP Source Trail
5.7.3 Example for Configuring URPF
Issue 06 (2010–01–08)
Run the display this command in the interface view to check whether URPF is enabled on
the current interface.
Run the reset ip source-trail command to clear all the statistics on IP source trail.
Run the reset ip source-trail ip-address ip-address command to clear the statistics on IP
source trail based on a tracing instance.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
5 Source IP Attack Defense Configuration
5-13