Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - SYSTEM BASICS CONFIGURATION GUIDE 2010-10-04 Configuration Manual page 485

protocol drop-probability
protocol priority
protocol rate
protocol skip-priority-rate-limiter
Copyright © 2010, Juniper Networks, Inc.
Use the no version to set the default value, which is equal to half of the configured
maximum rate.
See protocol burst.
Use to map a protocol to a specific drop probability, which is the percentage probability
of an exceeded packet being dropped.
Example
host1(config-dos-protection)#protocol IpLocalDhcpIc drop-probability 100
Use the no version to set the drop probability to the value specified in the associated
default group.
See protocol drop-probability.
Use to set the priority for the protocol.
Example
host1(config-dos-protection)#protocol IpLocalDhcpIc priority hiGreen
Use the no version to set the priority to the value specified in the associated default
group.
See protocol priority.
Use to map a protocol to a maximum rate limit.
The rate limit applies to all packets of the protocol for interfaces belonging to the DoS
protection group.
A particular protocol can be up to the sum of the four rates configured, depending on
the DoS group attached to an interface.
Use a maximum rate of 0 for protocols that are not used.
The actual rate never exceeds the maximum rate, but can be less than the configured
maximum rate due to the weighting of the protocols within a DoS protection group
and the use of multiple DoS protection groups.
Example
host1(config-dos-protection)#protocol IpLocalDhcpIc rate 100
Use the no version to set the value to the value specified in the associated default
group.
See protocol rate.
Chapter 7: Passwords and Security
455