Client-Verify Protected Ip - H3C MSR Series Command Reference Manual

Predefined user roles
network-admin
Usage guidelines
Enable HTTP client verification on the interface connected to the external network. This feature
protects internal servers against HTTP flood attacks.
For the HTTP client verification to collaborate with HTTP flood attack prevention, specify
client-verify as the HTTP flood attack prevention action. During collaboration, the device adds the
victim IP address to the protected IP list and verifies the untrusted sources if it detects an HTTP flood
attack. You can use the display client-verify http protected ip command to display the protected
IP list for HTTP client verification.
Examples
# Enable HTTP client verification on interface GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] client-verify http enable
Related commands
client-verify http protected ip
display client-verify http protected ip

client-verify protected ip

Use client-verify protected ip to specify an IPv4 address to be protected by the client verification
feature.
Use undo client-verify protected ip to remove an IPv4 address protected by the client verification
feature.
Syntax
client-verify { dns | http | tcp } protected ip destination-ip-address [ vpn-instance
vpn-instance-name ] [ port port-number ]
undo client-verify { dns | http | tcp } protected ip destination-ip-address [ vpn-instance
vpn-instance-name ] [ port port-number ]
Default
The client verification feature does not protect any IPv4 addresses.
Views
System view
Predefined user roles
network-admin
Parameters
dns: Specifies the DNS client verification feature.
http: Specifies the HTTP client verification feature.
tcp: Specifies the TCP client verification feature.
destination-ip-address: Specifies the IPv4 address to be protected. All connection requests destined
for this address are verified by the client verification feature.
986