How To Define The Subscriber Notification Setting For A Specific Attack Detector; How To Define The Snmp Trap Setting For A Specific Attack Detector - Cisco SCE8000 Configuration Manual

Configuring Attack Detectors
How to Enable a Specific Attack Detector and Assign it an AC
From the SCE(config if)# prompt, type attack-detector number access-list (aclnumber |none)
Step 1
[comment comment] and press Enter.
Enables the attack detector and assigns it the specified ACL.
How to Define the Action and Optionally the Thresholds for a Specific Attack Detector
From the SCE(config if)# prompt, type attack-detector number protocol (((TCP|UDP) [dest-port
Step 1
(specific|not- specific|both)])|ICMP|other|all) attack-direction
(single-side-source|single-side-destination|single-side-both|dual-sided|all) side
(subscriber|network|both) [action (report|block)] [open-flows-rate number suspected-flows-rate
rate suspected-flows-ratio ratio] and press Enter.
Defines the action of the specified attack detector

How to Define the Subscriber Notification Setting for a Specific Attack Detector

Use the following command to set the subscriber notification setting for a given attack detector and
selected set of attack types.
Step 1 From the SCE(config if)# prompt, type attack-detector number protocol (((TCP|UDP) [dest-port
(specific|not- specific|both)])|ICMP|other|all) attack-direction
(single-side-source|single-side-destination|single-side-both|dual-sided|all) side
(subscriber|network|both) (notify-subscriber|don't-notify-subscriber) and press Enter.
Defines the subscriber notification setting for the specified attack detector

How to Define the SNMP Trap Setting for a Specific Attack Detector

Use the following command to enable or disable sending an SNMP trap for a given attack detector and
selected set of attack types.
Step 1 From the SCE(config if)# prompt, type attack-detector number protocol (((TCP|UDP) [dest-port
(specific|not- specific|both)])|ICMP|other|all) attack-direction
(single-side-source|single-side-destination|single-side-both|dual-sided|all) side
(subscriber|network|both) (alarm|no-alarm) and press Enter.
Defines the SNMP trap setting for the specified attack detector.
Cisco SCE8000 Software Configuration Guide, Rel 3.1.6S
10-14
Chapter 10 Identifying and Preventing Distributed-Denial-Of-Service Attacks
OL-16479-01