Ruijie Networks RG-S2600E Series Cli Reference Manual page 829

S2600E CLI Reference Guide
Usage
guidelines
Examples
Related
commands
Platform
description
15.7.4 match
Use this command to specify the message matching filed for the user-defined anti-attack.
match [etype type] [src-mac smac [src-mac-mask smac_mask] ] [dst-mac dmac
[dst-mac-mask dst_mask]] [protocol protocol] [src-ip sip [src-ip-mask sip-mask]] [src-ipv6
sipv6 [src-ipv6-masklen sipv6-masklen]] [dst-ip dip [dst-ip-mask dip-mask]] [dst-ipv6 dipv6
[dst-ipv6-masklen dipv6-masklen]][src-port sport] [dst-port dport]
Parameter
description
Chapter 15 NFPP Configuration Commands
If the isolate time is not 0, the host with the packets rate
exceeding the attack threshold will be isolated and the
packets sent by this host will be discarded.
Ruijie(config)# nfpp
Ruijie(config-nfpp)# nfpp define tcp
Ruijie(config-nfpp-define)#isolate-period permanent
Command
show nfpp define
summary
-
Parameter Description
type
Ethernet link layer packet type
smac
Source MAC address
smac_mask
Source MAC address mask
dmac
Destination MAC address
dmac_mask
Destination MAC address mask
protocol
IPv4/v6 message protocol
sip
Source IPv4 address
Description
Show the user-defined
anti-attack configurations