Configure Enhanced-Dos-Protect Ipfdb Learn-Limit - Extreme Networks ExtremeWare Command Reference Manual

Security Commands

configure enhanced-dos-protect ipfdb learn-limit

configure enhanced-dos-protect ipfdb learn-limit <learn-limit> ports
<portlist>
Description
Configures the learning limit on untrusted ports for enhanced denial of service protection.
Syntax Description
learn-limit Specifies the number of packets allowed on the selected ports within the learning window before the
rate limit is applied; or before the software can create an IPFDB entry in the hardware. The valid
value range is 100-1953125. The default on Fast Ethernet ports is 100 pkts/learn window. The
default on Gigabyte ports is 100 pkts/learn window.
portlist Specifies one or more ports or slots and ports. On a modular switch, can be a list of slots and ports.
On a stand-alone switch, can be one or more port numbers. May be in the form 1, 2, 3-5, 1:*, 1:5,
1:6-1:8.
Default
The default learn-limit on Fast Ethernet ports is 100 pkts/learn window.
The default learn-limit on Gigabyte ports is 100 pkts/learn window.
Usage Guidelines
Use this command to configure a learning limit value to define the number of packets to be counted
before ExtremeWare can create an IPFDB entry in the hardware.
To reset the learning limit for enhanced denial of service protection to default values for selected ports,
use the following command:
unconfigure enhanced-dos-protect ipfdb learn-limit
Example
The following command configures the learn limit on port 3 at 75 packets within the learning window
before the IPFDB entry is created:
configure enhanced-dos-protect ipfdb learn-limit 75 ports 3
History
This command was first available in ExtremeWare 7.3.0 and ExtremeWare 7.3e.
Platform Availability
This command is available on all platforms.
858 ExtremeWare 7.5 Command Reference Guide