Cisco SCE 1000 2xGBE Guía de usuario descargar pdf (Pagina 241)

100

101

Chapter 9 Identifying And Preventing Distributed-Denial-Of-Service Attacks

Configuring Attack Detectors

SCE 1000 2xGBE Release 2.0.10 User Guide

OL-7117-02 9-9

Use these commands to define thresholds, actions, and subscriber notification setting for a

specific attack detector for a particular situation (protocol/attack direction/side).

To enable a specific attack detector and assign and it an ACL:

Step 1 From the SCE 1000(config if)# prompt, type attack-detector <number>

access-list <number> comment <comment> and press Enter.

To disable a specific attack detector:

Step 1 From the SCE 1000(config if)# prompt, type no attack-detector <number>

and press Enter.

To disable all non-default attack detectors:

Step 1 From the SCE 1000(config if)# prompt, type no attack-detector all-

numbered and press Enter.

To define action and optionally thresholds for a specific attack detector:

Step 1 From the SCE 1000(config if)# prompt, type attack-detector <number>

protocol (TCP|UDP|ICMP|other) attack-direction (attack-

source|attack-destination|both) side

(subscriber|network|both) action (report|block) [open-flows

<number> ddos-suspected-flows <number>] and press Enter.

1 2 ... 236 237 238 239 240 241 242 243 244 245 246 ... 489 490

Comentarios a estos manuales

Sin comentarios

Cisco SCE 1000 2xGBE Guía de usuario Pagina 241

Comentarios a estos manuales

Relacionado con productos y manuales para Redes Cisco SCE 1000 2xGBE