Example Of A Basic Connection-Rate Filtering Configuration - HP ProCurve 6400cl Series Access Security Manual

Virus Throttling (5300xl Switches Only)
Basic Connection-Rate Filtering Configuration
3-14

Example of a Basic Connection-Rate Filtering Configuration

B1
Server
B2
Server
Server
B3
Company
Intranet
Server
Figure 3-2. Sample Network
Basic Configuration. Suppose that in the sample network, the administra­
tor wanted to enable connection-rate filtering and configure the following
response to high connection-rate traffic on the 5300xl switch:
Ports B1 - B3: Throttle traffic from the transmitting host(s).
■
Port B4: Respond with Notify-Only to identify the transmitting
■
host(s).
■ Ports B9, D1, and D2: Block traffic from the transmitting host(s).
Figure 3-3 illustrates the configuration steps and resulting startup-config file.
5300xl Switch
VLAN 1
B9
15.45.100.1
VLAN 10
B4
15.45.200.1
VLAN 15
15.45.300.1
D1
D2
A
B
Switch
C
D
Switch
Switch
F G
H
E