Display Attack-Defense Policy Ip - H3C MSR Series Command Reference Manual

Field
Service ports
Non-specific
Flood attack defense for
protected IP addresses
Address
VPN instance
Thres(pps)
Actions
Ports
# Display brief information about all attack defense policies.
<Sysname> display attack-defense policy
------------------------------------------------------------
Policy Name
Atk-policy-1
P2
P123
Table 155 Command output
Field
Policy name
Applied list
Related commands
attack-defense policy

display attack-defense policy ip

Use display attack-defense policy ip to display information about IPv4 addresses protected by
flood attack detection and prevention.
Description
Ports that are protected against the flood attack. This field displays port
numbers only for the DNS and HTTP flood attacks. For other flood attacks,
this field displays a hyphen (-).
Whether the global flood attack detection is enabled.
Configuration of the IP address-specific flood attack detection and
prevention.
Protected IP address.
MPLS L3VPN instance to which the protected IP address belongs. If no
MPLS L3VPN instance is specified, this field displays a hyphen (-).
Threshold for triggering the flood attack prevention, in units of packets
sent to the IP address per second. If no threshold is specified, this field
displays 1000.
Prevention actions against the flood attack:
•
•
•
•
•
Ports that are protected against the flood attack. This field displays port
numbers only for the DNS and HTTP flood attacks. For other flood attacks,
this field displays a hyphen (-).
Attack-defense Policy Brief Information
Description
Name of the attack defense policy.
List of interfaces to which the attack defense policy is applied. If the policy
is applied to the device, this field displays Local.
BS—Blocking sources.
CV—Client verification.
D—Dropping packets.
L—Logging.
N—No action.
Applied list
GigabitEthernet1/0/1
GigabitEthernet1/0/2
GigabitEthernet1/0/3
None
GigabitEthernet1/0/2
999