HP HSR6600 Command Reference Manual page 489

Filed
WinNuke attack-defense
LAND attack-defense
Source route attack-defense
Route record attack-defense
Scan attack-defense
Add to blacklist
Blacklist timeout
Max-rate
Signature-detect action
ICMP flood attack-defense
ICMP flood action
ICMP flood high-rate
ICMP flood low-rate
ICMP flood attack-defense for specific IP
addresses
UDP flood attack-defense
UDP flood action
UDP flood high-rate
UDP flood low-rate
UDP flood attack on IP
SYN flood attack-defense
SYN flood action
SYN flood high-rate
SYN flood low-rate
SYN flood attack on IP
# Display summary configuration information about all attack protection policies.
<Sysname> display attack-defense policy
Attack-defense Policy Brief Information
--------------------------------------------------------------------------
Policy Number
1
Description
Indicates whether WinNuke attack protection is enabled.
Indicates whether Land attack protection is enabled.
Indicates whether Source Route attack protection is enabled.
Indicates whether Route Record attack protection is enabled.
Indicates whether scanning attack protection is enabled.
Indicates whether the blacklist function is enabled for scanning
attack protection.
Aging time of the blacklist entries.
Threshold for the connection establishment rate.
Action to be taken when a single-packet attack is detected. It
can be Drop-packet (dropping subsequent packets) or Syslog
(outputting an alarm log).
Indicates whether ICMP flood attack protection is enabled.
Action to be taken when an ICMP flood attack is detected. It can
be Drop-packet (dropping subsequent packets) or Syslog
(outputting an alarm log).
Global action threshold for ICMP flood attack protection.
Global silence threshold for ICMP flood attack protection.
ICMP flood attack protection settings for specific IP addresses.
Indicates whether UDP flood attack is enabled.
Action to be taken when a UDP flood attack is detected. It can
be Drop-packet (dropping subsequent packets) or Syslog
(outputting an alarm log).
Global action threshold for UDP flood attack protection.
Global silence threshold for UDP flood attack protection.
UDP flood attack protection settings for specific IP addresses.
Indicates whether SYN flood attack is enabled.
Action to be taken when a SYN flood attack is detected. It can
be Drop-packet (dropping subsequent packets) or Syslog
(outputting an alarm log).
Global action threshold for SYN flood attack protection.
Global silence threshold for SYN flood attack protection.
SYN flood attack protection settings for specific IP addresses.
Bound Interface
GigabitEthernet3/0/1
476