Huawei Quidway S9300 Configuration Manual page 223

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
Procedure
l
l
----End
6.3.8 Checking the Configuration
Procedure
l
l
----End
Example
Run the display cpu-defend policy 8 command to view the information about attack defense
policy 8.
<Quidway> display cpu-defend policy 8
Number : 8
Description : arp defend attack
Issue 06 (2010–01–08)
Applying the attack defense policy in the system view
1. Run:
system-view
The system view is displayed.
2. Run:
cpu-defend-policy policy-number [ global ]
An attack defense policy is applied.
If you do not specify global in the command, the attack defense policy is applied
–
on the main control board. A flexible plug-in card needs to be installed on the main
control board to support the application.
If you specify global in the command, the attack defense policy is applied on all
–
the LPUs.
Applying the attack defense policy in the slot view
1. Run:
system-view
The system view is displayed.
2. Run:
slot slot-id
The slot view is displayed.
3. Run:
cpu-defend-policy policy-number
An attack defense policy is applied.
The attack defense policy applied in the slot view takes effect only to the LPU in this
slot.
Run the display cpu-defend policy command to view the information about the attack
defense policy.
Run the display cpu-defend [ packet-type ] statistics [ all | slot slot-id ] command to view
statistics about packets directing at the CPU.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 Local Attack Defense Configuration
6-7