HPE Moonshot 45Gc Security Configuration Manual page 481

Switch module

Table of Contents

1000(default)

1000(default)

Flood attack defense for protected IP addresses:

If the device receives TCP flag attack packets or scanning attack packets that are destined for the

device, the device outputs logs. If the device receives TCP SYN flood attack packets that are

destined for the protected IP address, the device outputs logs and drops the attack packets. If the

device receives TCP SYN flood attack packets that are destined for the device but not to the

protected IP address, the device outputs logs.

# Display the attack defense statistics.

[Switch] display attack-defense statistics local

Attack policy name: a1

Scan attack defense statistics:

Flood attack defense statistics:

No flood attacks detected.

Signature attack defense statistics:

TCP invalid flags

TCP null flag

TCP all flags

TCP SYN-FIN flags

TCP FIN only flag

VPN instance Flood type

AttackTimes Dropped

Thres(pps) Actions Ports

Troubleshooting