Huawei quidway s7700 Configuration Manual page 66

Quidway S7700 Smart Routing Switch
Configuration Guide - SPU
Step 2 Run:
firewall defend all enable
All the attack defense functions are enabled.
Step 3 Run:
firewall defend fraggle enable
The Fraggle attack defense is enabled.
Step 4 Run:
firewall defend icmp-flood enable
The ICMP Flood attack defense is enabled.
After the parameters of ICMP Flood attack defense are set, you must enable the ICMP Flood
attack defense function; otherwise, the SPU does not detect the attack packets or take attack
defense measures.
Step 5 Run:
firewall defend icmp-redirect enable
The ICMP Redirect attack defense is enabled.
Step 6 Run:
firewall defend icmp-unreachable enable
The ICMP Unreachable attack defense is enabled.
Step 7 Run:
firewall defend ip-fragment enable
The IP-Fragment attack defense is enabled.
Step 8 Run:
firewall defend ip-sweep enable
The IP address sweeping attack defense is enabled.
After the parameters of IP address sweeping attack defense are set, you must enable the IP
address sweeping attack defense function; otherwise, the SPU does not detect the attack packets
or take attack defense measures.
Step 9 Run:
firewall defend land enable
The Land attack defense is enabled.
Step 10 Run:
firewall defend large-icmp enable
The large ICMP packet attack defense is enabled.
After the maximum length of ICMP packets is set, you must enable the large ICMP packet attack
defense function; otherwise, the SPU does not detect the attack packets or take attack defense
measures.
Step 11 Run:
firewall defend ping-of-death enable
The Ping of Death attack defense is enabled.
Issue 01 (2011-07-15) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2 Firewall Configuration
55