Optional) Configuring The Alarm Function Of Ip Source Guard; Optional) Configuring The Function Of Discarding Ip Packets With The Same Source And Destination Ip Addresses - Huawei Quidway S2700 Series Configuration Manual

Quidway S2700 Series Ethernet Switches
Configuration Guide - Security
----End
4.3.5 (Optional) Configuring the Alarm Function of IP Source
Guard
When the alarm function of IP source guard is enabled, the S2700 counts the number of received
IP packets whose rate exceeds the threshold. If this number exceeds the alarm threshold, the
S2700 sends a trap message to the NMS.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
interface interface-type interface-number
The interface view is displayed.
Step 3 Run:
ip source check user-bind alarm enable
The alarm function of IP source guard is enabled.
By default, the alarm function of IP source guard is disabled.
The IP packets check function cannot be configured on both VLAN and interface; otherwise,
the IP packets check alarm is valid.
Step 4 Run:
ip source check user-bind alarm threshold threshold
The alarm threshold of IP source guard is set.
By default, the alarm threshold of IP source guard is 100.
----End
4.3.6 (Optional) Configuring the Function of Discarding IP Packets
with the Same Source and Destination IP Addresses
Procedure
Step 1 Run:
system-view
Issue 01 (2011-07-15)
NOTE
This command is valid only for dynamic binding entries.
CAUTION
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
4 Source IP Attack Defense Configuration
125