Blacklist configuration commands
blacklist enable
Syntax
blacklist enable
undo blacklist enable
View
System view
Default level
2: System level
Parameters
None
Description
Use the blacklist enable command to enable the blacklist feature. With the blacklist feature enabled, the
switch filters all packets from IP addresses on the blacklist.
Use the undo blacklist enable command to restore the default.
By default, the blacklist feature is disabled.
After you enable the blacklist feature, you can manually add blacklist entries, or have the switch
cooperate with the login user authentication feature to add blacklist entries automatically.
Examples
# Enable the blacklist feature.
<Sysname> system-view
[Sysname] blacklist enable
blacklist ip
Syntax
blacklist ip source-ip-address [ timeout minutes ]
undo blacklist { all | ip source-ip-address [ timeout ] }
View
System view
Default level
2: System level
Parameters
source-ip-address: IP address to be added to the blacklist. It cannot be the broadcast address,
127.0.0.0/8, a class D address, or a class E address.
329