Local Attack Defense Configuration - Huawei Quidway S9300 Configuration Manual

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
6
About This Chapter
This chapter describes the principle and configuration of local attack defense.
6.1 Overview of Local Attack Defense
This section describes the principle of the local attack defense.
6.2 Local Attack Defense Features Supported by the S9300
This section describes how the local attack defense feature is supported in the S9300.
6.3 Configuring the Attack Defense Policy
This section describes how to configure the attack defense policy.
6.4 Configuring Attack Source Tracing
After the attack source tracing function is configured, the system can actively defend against
possible attack packets by analyzing whether packets directing at the CPU attack the CPU.
6.5 Maintaining the Attack Defense Policy
This section describes how to clear statistics about the attack sources and the packets sent to the
CPU.
6.6 Configuration Examples
This section provides several configuration examples of attack defense policy.
Issue 06 (2010–01–08)

Local Attack Defense Configuration

Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 Local Attack Defense Configuration
6-1