System-Guard Configuration (For S3100; System-Guard Overview; System-Guard Configuration; Enabling The System-Guard Function - H3C S3100 Series Operation Manual

5
System-Guard Configuration (For S3100-SI)
The configuration introduced in this chapter is only supported by the S3100-SI series switches.

System-Guard Overview

The system-guard function checks system-guard-enabled ports regularly to determine if the ports are
under attack. With this function enabled, if the number of the packets received by a
system-guard-enabled port exceeds the set threshold, the port is regarded to be under attack. The
switch then limits the rate of the port and resumes port checking operation after a specific period
elapses.

System-Guard Configuration

The system guard configuration includes:

Enabling the system-guard function

Configuring system-guard-related parameters

Specifying system-guard-enabled ports
Enabling the System-Guard function
Table 5-1 lists the operations to enable the system-guard function.
Table 5-1 Enable the system-guard function
Operation
Enter system view
Enable the system-guard
function
Configuring System-Guard-Related Parameters
Table 5-2 lists the operations to configure system-guard-related parameters, including system-guard
mode, checking interval, threshold (in terms of the number of the received packets), and controlling
period. Note that the configuration takes effect only after you enable the system-guard function.
Commands
system-view
system-guard enable
5-1
Description
—
Required
By default, The system-guard function
is disabled.