Table of Contents
Advertisement
Configuring Attack Detectors
From the SCE(config if)# prompt, type attack-detector default protocol (((TCP|UDP) [dest-port
Step 1
(specific|not- specific|both)]) |ICMP|other|all) attack-direction
(single-side-source|single-side-destination|single-side-both|dual-sided|all) side
(subscriber|network|both) [action (report|block)] [open-flows-rate number suspected-flows-rate
rate suspected-flows-ratio ratio] and press Enter.
Configures the default attack detector for the defined attack type.
From the SCE(config if)# prompt, type
Step 2
(specific|not- specific|both)])|ICMP|other|all) attack-direction
(single-side-source|single-side-destination|single-side-both|dual-sided|all) side
(subscriber|network|both) (notify-subscriber|don't-notify-subscriber) and press Enter.
Enables or disables subscriber notification by default for the defined attack type.
The attack type must be defined the same as in Step 1.
From the SCE(config if)# prompt, type attack-detector default protocol (((TCP|UDP) [dest-port
Step 3
(specific|not- specific|both)]) |ICMP|other|all) attack-direction
(single-side-source|single-side-destination|single-side-both|dual-sided|all) side
(subscriber|network|both) (alarm|no-alarm) and press Enter.
Enables or disables sending an SNMP trap by default for the defined attack type.
The attack type must be defined the same as in Step 1.
How to Reinstate the System Defaults for a Selected Set of Attack Types
Use the following command to delete user-defined default values for action, thresholds, subscriber
notification, and sending an SNMP trap for a selected set of attack types, and reinstate the system
defaults.
From the SCE(config if)# prompt, type default attack-detector default protocol (((TCP|UDP)
Step 1
[dest-port (specific|not- specific|both)])|ICMP|other|all) attack-direction
(single-side-source|single-side-destination|single-side-both|dual-sided|all) side
(subscriber|network|both) and press Enter.
Reinstates the system defaults for the defined attack types.
How to Reinstate the System Defaults for All Attack Types
From the SCE(config if)# prompt, type default attack-detector default and press Enter.
Step 1
Reinstates the system defaults for the defined attack types.
Cisco SCE 2000 and SCE 1000 Software Configuration Guide
11-12
Chapter 11
Identifying and Preventing Distributed-Denial-Of-Service Attacks
ttack-detector default protocol (((TCP|UDP) [dest-port
a
OL-7827-12
Advertisement
Table of Contents
