Local Attack Defense Configuration - Huawei Quidway S3700 Series Configuration Manual

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security
6
About This Chapter
This chapter describes the principle and configuration of local attack defense.
6.1 Overview of Local Attack Defense
This section describes the principle of the local attack defense.
6.2 Local Attack Defense Features Supported by the S3700
The S3700 implements the local attack defense feature through the blacklist and CAR.
6.3 Configuring the Attack Defense Policy
This section describes how to configure the attack defense policy.
6.4 Configuring Attack Source Tracing
The attack source tracing technology analyzes the influence of packets on the CPU and notifies
users through logs or alarms for possible attack packets.
6.5 Maintaining the Attack Defense Policy
This section describes how to clear statistics about the attack sources and the packets sent to the
CPU.
6.6 Configuration Examples
This section provides several configuration examples of attack defense policy.
Issue 01 (2011-07-15)

Local Attack Defense Configuration

Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 Local Attack Defense Configuration
177