Table of Contents
Advertisement
DCP Configuration Samples
Static Configuration
*A:node1>config>card>fp>d-cpu-prot# info detail
----------------------------------------------
----------------------------------------------
*A:node1>config>sys>security>dist-cpu-protection# info
----------------------------------------------
*A:node1>config>subscr-mgmt>msap-policy# info
----------------------------------------------
Dynamic Configuration with per-SAP Triggers
*A:node1>config>card>fp# info
----------------------------------------------
----------------------------------------------
*A:node1>config>sys>security>dist-cpu-protection# info
----------------------------------------------
7950 SR OS System Management Guide
no dynamic-enforcement-policer-pool
policy "my-ddos-policy" create
static-policer "my-arp-policer" create
rate packets 5 within 10 initial-delay 5
exceed-action discard
exit
static-policer "my-ppp-policer" create
rate packets 3 within 10 initial-delay 3
exceed-action discard hold-down 60
exit
protocol arp create
enforcement static "my-arp-policer"
exit
protocol pppoe-pppoa create
enforcement static "my-ppp-policer"
exit
exit
dist-cpu-protection "my-ddos-policy"
dist-cpu-protection
dynamic-enforcement-policer-pool 2000
exit
policy "my-ddos-policy2" create
local-monitoring-policer "my-local-monitor" create
rate packets 10 within 10 initial-delay 7
exceed-action low-priority
exit
protocol arp create
enforcement dynamic "my-local-monitor"
dynamic-parameters
detection-time 900
rate packets 5 within 10 initial-delay 5
Security
Page 43
Advertisement
Table of Contents
