How To Remove All Force-Filter Settings - Cisco SCE 8000 10GBE Software Configuration Manual

Chapter 12 Identifying and Preventing Distributed Denial-of-Service Attacks
From the SCE(config if)# prompt, type:
Command
attack-filter force-filter action (block|report) protocol
(((TCP|UDP) [dest-port (port-number
|not-specific))|ICMP|other) attack-direction
(((single-side-source|single-side-destination|single-side-
both) (ip ip-address)|(dual-sided source-ip
source-ip-address destination-ip dest-ip-address)) side
(subscriber|network|both)[notify-subscriber]
no attack-filter force-filter protocol (((TCP|UDP)
[dest-port (port-number |not-specific))|ICMP|other)
attack-direction
(((single-side-source|single-side-destination|single-side-
both) (ip ip-address)|(dual-sided source-ip
source-ip-address destination-ip dest-ip-address)) side
(subscriber|network|both)

How to Remove All force-filter Settings

From the SCE(config if)# prompt, type:
Command
no attack-filter force-filter all
OL-30621-02
Preventing and Forcing Attack Detection
Purpose
Configures a force-filter setting for a
specified situation.
Removes a force-filter setting from a
specified situation.
Purpose
Removes all force-filter settings.
Cisco SCE 8000 10GBE Software Configuration Guide
12-23