HP MSR Series Configuration Manual page 522

[Router-attack-defense-policy-a1] scan detect level low action logging block-source
timeout 10
# Configure SYN flood attack detection for 10.1.1.2. Set the threshold for triggering attack prevention
to 5000. Specify the prevention actions as logging and drop.
[Router-attack-defense-policy-a1] syn-flood detect ip 10.1.1.2 threshold 5000 action
logging drop
[Router-attack-defense-policy-a1] quit
# Apply attack defense policy a1 to interface GigabitEthernet 2/0/2.
[Router] interface gigabitethernet 2/0/2
[Router-GigabitEthernet2/0/2] attack-defense apply policy a1
[Router-GigabitEthernet2/0/2] quit
Verifying the configuration
# Verify that the attack defense policy a1 is successfully configured.
[Router] display attack-defense policy a1
Attack-defense Policy Information
--------------------------------------------------------------------------
Policy name
Applied list
--------------------------------------------------------------------------
Exempt IPv4 ACL
Exempt IPv6 ACL
--------------------------------------------------------------------------
Actions: CV-Client verify
Signature attack defense configuration:
Signature name
Fragment
Impossible
Teardrop
Tiny fragment
IP option abnormal
Smurf
Traceroute
Ping of death
Large ICMP
Max length
Large ICMPv6
Max length
TCP invalid flags
TCP null flag
TCP all flags
TCP SYN-FIN flags
TCP FIN only flag
TCP Land
Winnuke
UDP Bomb
UDP Snork
UDP Fraggle
: a1
: GE2/0/2
: Not configured
: Not configured
BS-Block source L-Logging
Defense
Disabled
Disabled
Disabled
Disabled
Disabled
Enabled
Disabled
Disabled
Disabled
4000 bytes
Disabled
4000 bytes
Disabled
Disabled
Disabled
Disabled
Disabled
Disabled
Disabled
Disabled
Disabled
Disabled
507
D-Drop N-None
Level Actions
low L
medium L,D
medium L,D
low L
medium L,D
medium L
low L
medium L,D
info L
info L
medium L,D
medium L,D
medium L,D
medium L,D
medium L,D
medium L,D
medium L,D
medium L,D
medium L,D
medium L,D