Huawei Quidway S9300 Configuration Manual page 232

6 Local Attack Defense Configuration
[Quidway] slot 2
[Quidway-slot-2] cpu-defend-policy 6
[Quidway-slot-2] quit
Step 5 Verify the configuration.
# View information about the configured attack defense policy.
<Quidway> display cpu-defend policy 6
Number : 6
Related slot : <1,2>
Configuration :
----End
Configuration Files
#
sysname Quidway
#
acl number 2001
rule 5 permit source 1.1.1.0 0.0.0.255
#
acl number 2002
rule 5 permit source 2.2.2.0 0.0.0.255
#
acl number 2003
rule 5 permit source 3.3.3.0 0.0.0.255
#
cpu-defend policy 6
whitelist 1 acl 2001
blacklist 1 acl 2003
user-defined-flow 1 acl 2002
car user-defined-flow 1 cir 5000 cbs 940000
#
slot 1
cpu-defend-policy 6
#
slot 2
cpu-defend-policy 6
#
return
6-16
Whitelist 1 ACL number : 2001
Blacklist 1 ACL number : 2003
User-defined-flow 1 ACL number : 2002
Car user-defined-flow 1 : CIR(5000)
Car user-defined-flow 2 : CIR(64)
Car user-defined-flow 3 : CIR(64)
Car user-defined-flow 4 : CIR(64)
Car user-defined-flow 5 : CIR(64)
Car user-defined-flow 6 : CIR(64)
Car user-defined-flow 7 : CIR(64)
Car user-defined-flow 8 : CIR(64)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
CBS(940000)
CBS(10000)
CBS(10000)
CBS(10000)
CBS(10000)
CBS(10000)
CBS(10000)
CBS(10000)
Issue 06 (2010–01–08)