Network Attack Prevention Configuration Commands - Alcatel-Lucent OmniAccess 700 Cli Configuration Manual

Left running head:
Chapter name (automatic)
Filter and Firewall
N A P
ETWORK TTACK
This section provides the commands used to prevent network attacks.
T E F C
O NTER IREWALL ONFIGURATION
firewall
E
XAMPLE
ALU(config)# firewall
ALU(config-firewall)#
T C D S A
O ONFIGURE O TTACK
Command (in FwCM)
attack <name>
E
XAMPLE
ALU(config-firewall)# attack A1
ALU(config-firewall-attack-A1)#
T C
O ONFIGURE
A O
TTACK BJECT
During system bootup, an attack object and a policy map is created by the
system. These are the System-default Attack Object and the System-default
Policy. This system-default policy is attached to the system-default attack object,
and by default is attached to the system traffic.
Note:
1. You can only modify the system default attack object but cannot delete it.
2. You cannot modify/delete the system default policy.
3. You can modify/delete the user created attack objects and the attack
678
Beta
C
REVENTION ONFIGURATION
M
ODE
Command (in CM)
O
BJECT
D A (R
EFAULT TTACKS
policies associated to it.
Alcatel-Lucent
C
OMMANDS
Description
This command enters the firewall
configuration mode.
Description
This command is used to configure an
attack object to be attached to a firewall
policy.
L / N -
ATE IMITING ON RATE
L )
IMITING FOR AN
CLI Configuration Guide
Beta