HP FlexNetwork 7500 Series Command Reference Manual page 558

Hide thumbs Also See for FlexNetwork 7500 Series:
Table of Contents

Advertisement

Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
policy-name: Specifies an attack defense policy by its name. The policy name is a case-insensitive
string of 1 to 31 characters. Valid characters include uppercase and lowercase letters, digits,
underscores (_), and hyphens (-).
ack-flood: Specifies ACK flood attack.
dns-flood: Specifies DNS flood attack.
fin-flood: Specifies FIN flood attack.
flood: Specifies all IPv6 flood attacks.
http-flood: Specifies HTTP flood attack.
icmpv6-flood: Specifies ICMPv6 flood attack.
rst-flood: Specifies RST flood attack.
syn-ack-flood: Specifies SYN-ACK flood attack.
syn-flood: Specifies SYN flood attack.
udp-flood: Specifies UDP flood attack.
ipv6-address: Specifies a protected IPv6 address. If you do not specify an IPv6 address, this
command displays information about all protected IPv6 addresses.
vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance to which the IPv6 address
belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. Do not
specify this option if the IPv6 address is on the public network.
slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command
displays information about IPv6 addresses protected by flood attack detection and prevention for all
cards. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The
chassis-number argument represents the member ID of the IRF member device. The slot-number
argument represents the slot number of the card. If you do not specify a card, this command displays
information about IPv6 addresses protected by flood attack detection and prevention for all cards. (In
IRF mode.)
count: Displays the number of matching IPv6 addresses protected by flood attack detection and
prevention.
Examples
# (In standalone mode.) Display information about all IPv6 addresses protected by flood attack
detection and prevention in attack defense policy abc.
<Sysname> display attack-defense policy abc flood ipv6
Slot 1:
IPv6 address
2013::127f
2::5
1::5
Slot 2:
IPv6 address
VPN instance
Type
--
SYN-ACK-FLOOD 100
--
ACK-FLOOD
--
ACK-FLOOD
VPN instance
Type
Rate threshold(PPS) Dropped
100
100
Rate threshold(PPS) Dropped
543
4294967295
10
23

Advertisement

Table of Contents
loading

Table of Contents