Unconfigure Enhanced-Dos-Protect Rate-Limit - Extreme Networks ExtremeWare Command Reference Manual

Security Commands

unconfigure enhanced-dos-protect rate-limit

unconfigure enhanced-dos-protect rate-limit [threshold | drop-probability |
learn-window | protocol] ports <portlist>
Description
Removes ports from rate limiting or resets the rate limiting configuration for enhanced denial of service
protection to default parameter values for the selected ports.
Syntax Description
threshold Resets to the default value the number of packets allowed on a given port within the
learning window before the rate limit is applied. The default on Fast Ethernet ports is
100 packets/learn window. The default on Gigabyte ports is 1000 packets/learn window.
drop-probability Resets to the default value the percentage of slow-path traffic to be dropped per port.
The default value is 50 percent.
learn-window Resets to the default value the number of seconds for the learning window per port. This
value is the duration of time to be considered to reach the rate limit threshold. The default
value is 10 seconds.
protocol [all | icmp] Resets to the default value the protocol packets to which rate limiting is applied. By default,
rate limiting is applied to Internet Control Message Protocol (ICMP) packets.
portlist Specifies one or more ports or slots and ports. On a modular switch, can be a list of slots
and ports. On a stand-alone switch, can be one or more port numbers. May be in the form
1, 2, 3-5, 2:*, 2:5, 2:6-2:8.
Default
Rate limiting is applied by default to ICMP packets.
Usage Guidelines
Use this command to remove ports from rate limiting, or reset the rate-limit threshold, drop probability,
learning window, or packet protocol. To verify settings, use the
command.
rate-limit
The default values for enhanced DoS protection rate limiting are as follows:
• Threshold on Fast Ethernet ports—100 packets/learn window
• Threshold on Gigabyte ports—1000 packets/learn window
• Drop-probability—50 percent
• Learn-window—10 seconds
Examples
The following command resets the rate limiting threshold on Fast Ethernet port 3 to the default value,
100 packets:
unconfigure enhanced-dos-protect rate-limit threshold ports 3
The following command resets the rate limiting drop probability on port 4 to the default value, 50
percent:
1112
show enhanced-dos-protect
ExtremeWare 7.7 Command Reference Guide