Dos Protection Group Configuration Example - Juniper SYSTEM BASICS - CONFIGURATION GUIDE V 11.1.X Configuration Manual

Table 50: IP-Related Protocols (continued)

DoS Protection Group Configuration Example

NOTE: To configure a DoS protection group for an interface, you must configure the
settings under the default group, which is the only group that is currently supported.
To configure a DoS protection group for an interface:
CLI Name
ipMld
ipMulticastBroadcastOther
ipMulticastCacheMiss
ipMulticastCacheMissAutoRp
ipMulticastControlIc
ipMulticastControlSc
ipMulticastDhcpSc
ipMulticastVrrp
ipMulticastWrongIf
ipNeighborDiscovery
ipNeighborDiscoveryMiss
ipNormalPathMtu
ipOptionsOther
ipOptionsRouterAlert
ipOsi
ipReassembly
ipRouteNoRoute
ipRouteToSrpEthernet
ipTtlExpired
host1(config)#dos-protection-group default
host1(config-dos-protection)#protocol AtmOam rate 512
host1(config-dos-protection)#protocol PppoeControl rate 512
host1(config-dos-protection)#protocol IpLocalOther rate 512
Description of Flow
IP Multicast listener packet
Ip Multicast/Broadcast not otherwise classified
IP Multicast route table misses
IP Multicast route table Auto-RP misses
IP IGMP packets for the IC
IP Multicast control packet not otherwise classified
IP Multicast DHCP destined for SC
IP VRRP packets
IP Multicast on wrong interface
IPv6 Neighbor Discovery
IPv6 Neighbor Discovery miss
IP Path MTU request
IP options not otherwise classified
IP Router Alert
OSI packets
IP packets that have been reassembled on a server card
IP packets with no route indication
Packets routed to the SRP Ethernet
IP TTL expired
Denial of Service (DoS) Protection
Chapter 7: Passwords and Security
465