Maintenance Attack Defense And Application Layer Association - Huawei AR1200-S Configuration Manual

Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security
14.6 Maintenance Attack Defense and Application Layer
Association
This section describes how to clear statistics about attack defense.
14.6.1 Clearing Statistics of Attack Defense and Application Layer
Association
After confirming that you need to clear statistics about attack defense, you can run a command
to do it.
Context
The statistics cannot be recovered if cleared. Perform the action with caution.
Procedure
Step 1 Run the reset anti-attack statistics [ abnormal | fragment | tcp-syn | udp-flood | icmp-
flood ] command to clear the statistics of defense again packet attacks.
----End
14.7 Configuration Example
This section provides an example for improving network security through attack defense.
Familiarize yourself with the configuration procedures against the networking diagram. Each
configuration example consists of the networking requirements, configuration precautions,
configuration roadmap, configuration procedures, and configuration files.
14.7.1 Example of Configuring Attack Defense
This section describes the applications of attack defense on an actual network, including defense
against malformed packet attacks, fragmented packet attacks, and flood attacks.
Networking Requirements
As shown in
To prevent Router A from being attacked by the TCP/IP attack packets sent by a hacker on the
LAN, the following attack defense measures must be used on Router A.
l
Issue 02 (2012-03-30)
CAUTION
Figure 14-1, Router B as a client is connected to Router A on the public network.
Enable defense against abnormal packet attacks.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
14 Configuration of Attack Defense and Application Layer
Association
291