HPE FlexNetwork 10500 Series Security Configuration Manual page 508

[Device-attack-defense-policy-a1] signature detect smurf action logging
# Configure low-level scanning attack detection, specify logging and block-source as the
prevention actions, and set the blacklist entry aging time to 10 minutes.
[Device-attack-defense-policy-a1] scan detect level low action logging block-source
timeout 10
# Configure SYN flood attack detection for 10.1.1.2, set the attack prevention triggering threshold to
5000, and specify logging and drop as the prevention actions.
[Device-attack-defense-policy-a1] syn-flood detect ip 10.1.1.2 threshold 5000 action
logging drop
[Device-attack-defense-policy-a1] quit
# Apply attack defense policy a1 to GigabitEthernet 1/0/2.
[Device] interface gigabitethernet 1/0/2
[Device-GigabitEthernet1/0/2] attack-defense apply policy a1
[Device-GigabitEthernet1/0/2] quit
Verifying the configuration
# Verify that attack defense policy a1 is successfully configured.
[Device] display attack-defense policy a1
Attack-defense Policy Information
--------------------------------------------------------------------------
Policy name
Applied list
--------------------------------------------------------------------------
Exempt IPv4 ACL
Exempt IPv6 ACL
--------------------------------------------------------------------------
Actions: BS-Block source
Signature attack defense configuration:
Signature name
Fragment
Impossible
Teardrop
Tiny fragment
IP option abnormal
Smurf
Traceroute
Ping of death
Large ICMP
Max length
Large ICMPv6
Max length
TCP invalid flags
TCP null flag
TCP all flags
TCP SYN-FIN flags
TCP FIN only flag
TCP Land
Winnuke
: a1
: GE1/0/2
: Not configured
: Not configured
L-Logging D-Drop
Defense
Disabled
Disabled
Disabled
Disabled
Disabled
Enabled
Disabled
Disabled
Disabled
4000 bytes
Disabled
4000 bytes
Disabled
Disabled
Disabled
Disabled
Disabled
Disabled
Disabled
491
N-None
Level
low
medium
medium
low
medium
medium
low
medium
info
info
medium
medium
medium
medium
medium
medium
medium
Actions
L
L,D
L,D
L
L,D
L
L
L,D
L
L
L,D
L,D
L,D
L,D
L,D
L,D
L,D