Huawei AR1200-S Configuration Manual page 196

Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security
ssh-server
sslvpn
stp
tcp
telnet-client
telnet-server
ttl-expired
udp-helper
unknown-multicast
unknown-packet
voice
vrrp
-----------------------------------------------------------------
# The log for attack source tracing of Net1 indicates that attack source tracing has taken effect.
Dec 18 2010 09:55:50-05:13 AR1200-S %%01SECE/4/USER_ATTACK(l)[0]:User attack
occurred.(Slot=MPU, SourceAttackInterface=Ethernet0/0/1, OuterVlan/
InnerVlan=0/0, UserMacAddress=0001-c0a8-0102, AttackPackets=48 packets per
second)
# View the statistics on packets sent to the SRU. The discarded packets indicate that the rate
limit is set for ARP Request packets.
<Huawei> display cpu-defend statistics
-----------------------------------------------------------------------
Packet Type
-----------------------------------------------------------------------
8021X
arp-miss
arp-reply
arp-request
bfd
bgp
bgp4plus
dhcp-client
dhcp-server
dhcpv6-reply
dhcpv6-request
dlsw
dns
fib-hit
fr
ftp-client
ftp-server
fw-dns
fw-ftp
fw-http
fw-rtsp
fw-sip
gre-keepalive
gvrp
hdlc
http-client
http-server
hw-tacacs
icmp
icmpv6
igmp
ip-option
ipsec-ike
ipsec-isa
ipsec-osa
isis
isisv6
l2tp
lacp
lldp
nd
nd-miss
Issue 02 (2012-03-30)
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
Disabled
Enabled
Enabled
Enabled
Disabled
Pass Packets
8090
1446576
70252
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
9 Local Attack Defense Configuration
128
4096
96
128
128
128
256
16
128
256
256
256
Drop Packets
0
5
127773
0
0
0
879
0
0
0
0
4
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
59
224
539
0
0
0
0
0
0
0
0
358
0
4
3
3
2
4
4
1
2
1
1
4
3
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
182