HP FlexNetwork MSR Series Command Reference Manual page 844
Comware 7 security
Hide thumbs
Also See for FlexNetwork MSR Series:
- Configuration manual (392 pages) ,
- Configuration manuals (159 pages)
Advertisement
slot slot-number: Specifies a card by its slot number. This option is available only when you specify
the device or a global interface, such as a VLAN interface or tunnel interface. If you do not specify a
card, this command displays IPv4 flood attack detection and prevention statistics for all cards.
(Distributed devices in standalone mode.)
slot slot-number: Specifies an IRF member device by its member ID. This option is available only
when you specify the device or a global interface, such as a VLAN interface or tunnel interface. If you
do not specify a member device, this command displays IPv4 flood attack detection and prevention
statistics for all member devices. (Centralized devices in IRF mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The
chassis-number argument represents the member ID of the IRF member device. The slot-number
argument represents the slot number of the card. This option is available only when you specify the
device or a global interface, such as a VLAN interface or tunnel interface. If you do not specify a card,
this command displays IPv4 flood attack detection and prevention statistics for all cards. (Distributed
devices in IRF mode.)
count: Displays the number of matching protected IPv4 addresses.
Usage guidelines
The device collects statistics about protected IP addresses for flood attack detection and prevention.
The attackers' IP addresses are not recorded.
If the interface and local parameters are not specified, this command display IPv4 flood attack
detection and prevention statistics on all interfaces and the device.
Examples
# (Centralized devices in standalone mode.) Display all IPv4 flood attack detection and prevention
statistics.
<Sysname> display attack-defense flood statistics ip
IP address
192.168.100.221 a0123456789 GE1/0/2
201.55.7.45
192.168.11.5
201.55.7.44
192.168.11.4
# (Distributed devices in standalone mode/centralized devices in IRF mode.) Display all IPv4 flood
attack detection and prevention statistics.
<Sysname> display attack-defense flood statistics ip
slot 1:
IP address
192.168.100.221 a0123456789 GE1/0/2
201.55.7.45
192.168.11.5
201.55.7.44
192.168.11.4
slot 2:
IP address
201.55.1.10
192.168.100.30
192.168.100.66
# (Distributed devices in IRF mode.) Display all IPv4 flood attack detection and prevention statistics.
<Sysname> display attack-defense flood statistics ip
Slot 1 in chassis 1:
IP address
VPN
Detected on
asd
GE1/0/2
--
GE1/0/3
--
GE1/0/4
--
GE1/0/5
VPN
Detected on
asd
GE1/0/2
--
GE1/0/3
--
GE1/0/4
--
GE1/0/5
VPN
Detected on
--
GE2/0/3
--
GE2/0/4
--
GE2/0/2
VPN
Detected on
Detect type
State
SYN-ACK-FLOOD Normal
SYN-ACK-FLOOD Normal
ACK-FLOOD
Normal
DNS-FLOOD
Normal
ACK-FLOOD
Normal
Detect type
State
SYN-ACK-FLOOD Normal
SYN-ACK-FLOOD Normal
ACK-FLOOD
Normal
DNS-FLOOD
Normal
ACK-FLOOD
Normal
Detect type
State
ACK-FLOOD
Normal
DNS-FLOOD
Normal
SYN-ACK-FLOOD Normal
Detect type
State
826
PPS
Dropped
1000
4294967295
1000
111111111
1000
222222222
1000
111111111
1000
22222222
PPS
Dropped
1000
4294967295
1000
111111111
1000
222222222
1000
111111111
1000
22222222
PPS
Dropped
1000
222222222
1000
333333333
1000
165467998
PPS
Dropped
Advertisement
