H3C MSR Series Command Reference Manual page 1024

Comware 7 security
Hide thumbs Also See for MSR Series:
Table of Contents

Advertisement

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The
chassis-number argument represents the member ID of the IRF member device. The slot-number
argument represents the slot number of the card. If you do not specify a card, this command displays
information about IPv4 addresses protected by flood attack detection and prevention for all cards.
(Distributed devices in IRF mode.)
count: Displays the number of matching IPv4 addresses protected by flood attack detection and
prevention.
Examples
# (Centralized devices in standalone mode.) Display information about all IPv4 addresses protected
by flood attack detection and prevention in the attack defense policy abc.
<Sysname> display attack-defense policy abc flood ip
IP address
123.123.123.123 a012345678901234 SYN-ACK-FLOOD 1000
201.55.7.45
192.168.11.5
# (Distributed devices in standalone mode/centralized devices in IRF mode.) Display information
about all IPv4 addresses protected by flood attack detection and prevention in the attack defense
policy abc.
<Sysname> display attack-defense policy abc flood ip
Slot 1:
IP address
123.123.123.123 a012345678901234 SYN-ACK-FLOOD 1000
201.55.7.45
192.168.11.5
Slot 2:
IP address
123.123.123.123 a012345678901234 SYN-ACK-FLOOD 100
201.55.7.45
192.168.11.5
# (Distributed devices in IRF mode.) Display information about all IPv4 addresses protected by flood
attack detection and prevention in the attack defense policy abc.
<Sysname> display attack-defense policy abc flood ip
Slot 1 in chassis 1:
IP address
123.123.123.123 a012345678901234 SYN-ACK-FLOOD 1000
201.55.7.45
192.168.11.5
Slot 2 in chassis 2:
IP address
123.123.123.123 a012345678901234 SYN-ACK-FLOOD 100
201.55.7.45
192.168.11.5
# (Centralized devices in standalone mode.) Display the number of IPv4 addresses protected by
flood attack detection and prevention in the attack defense policy abc.
<Sysname> display attack-defense policy abc flood ip count
Totally 3 flood protected IP addresses.
# (Distributed devices in standalone mode/centralized devices in IRF mode.) Display the number of
IPv4 addresses protected by flood attack detection and prevention in the attack defense policy abc.
<Sysname> display attack-defense policy abc flood ip count
VPN instance
Type
--
ICMP-FLOOD
--
DNS-FLOOD
VPN instance
Type
--
ICMP-FLOOD
--
DNS-FLOOD
VPN instance
Type
--
ICMP-FLOOD
--
DNS-FLOOD
VPN instance
Type
--
ICMP-FLOOD
--
DNS-FLOOD
VPN instance
Type
--
ICMP-FLOOD
--
DNS-FLOOD
Rate threshold(PPS) Dropped
100
23
Rate threshold(PPS) Dropped
100
23
Rate threshold(PPS) Dropped
100
23
Rate threshold(PPS) Dropped
100
23
Rate threshold(PPS) Dropped
100
23
1001
4294967295
10
100
4294967295
10
100
2543
122
0
4294967295
10
100
2543
122
0

Advertisement

Table of Contents
loading

Table of Contents