System-Guard Same-Dest-Ip-Attack-Packets Number; System-Guard Scan-Dest-Ip-Attack-Packets Number - D-Link DES-7200 Cli Reference Manual

DES-7200 CLI Reference Guide
50.1.3

system-guard same-dest-ip-attack-packets number

Use this command to configure the maximum number of packets attacking an inexistent IP
address. Use the no form of the command to restore it to the default value.
system-guard same-dest-ip-attack-packets number
no system-guard same-dest-ip-attack-packets
Parameter
description
Default
Command
mode
Usage
guidelines
Examples
Related
commands
50.1.4

system-guard scan-dest-ip-attack-packets number

Use this command to configure the maximum number of IP packets attacking a batch of IP
segments. Use the no form of the command to restore it to the default value.
system-guard scan-dest-ip-attack-packets number
no system-guard scan-dest-ip-attack-packets
Chapter 50 Anti-attack System Guard Configuration Commands
Parameter Description
Maximum number of the IP packets attacking an
inexistent IP address. The value range is 0 to
number
2000 packets per second, 20 packets by default.
Zero indicates this attack is not monitored.
The default value is 20 packets per second.
Interface configuration mode.
The less the threshold is set, the poorer the accuracy of the attack
judgment is. It is easy to isolate the normal host online incorrectly. It is
recommended that administrators configure a threshold according to
the security degree of the actual network environment.
Configure the maximum number of the packets as 100:
DES-7210(config-if)# system-guard
same-dest-ip-attack-packets 100
Command Description
system-guard
Enable the anti-attack function.
enable
50-3