Cisco SCE 2000 4xGBE Dokumentacja Strona 66
- Strona / 604
- Spis treści
- BOOKMARKI
Oceniono. / 5. Na podstawie oceny klientów
2-30
Cisco SCE 2000 and SCE 1000 CLI Command Reference
OL-26797-03
Chapter 2 CLI Command Reference
attack-filter
• For a selected attack direction, either for all protocols or for a selected protocol.
If the selected protocol is either TCP or UDP, specify whether the destination port is specific
(port-based), not specific (port-less), or both. If the destination port or ports are specific, the specific
destination ports are configured using the attack-detector TCP-port-list|UDP-port-list,
page 2-27command.
Authorization: admin
Examples The following examples illustrate the use of this command.
EXAMPLE 1
The following example shows how to enable specific, dual-sided attack detection for TCP protocol only.
SCE>enable 10
Password:<cisco>
SCE#config
SCE(config)#interface LineCard 0
SCE(config if)#attack-filter protocol TCP dest-port specific attack-direction dual-sided
SCE(config if)#
EXAMPLE 2
The following example shows how to enable single-sided attack detection for ICMP protocol only.
SCE>enable 10
Password:<cisco>
SCE#config
SCE(config)#interface LineCard 0
SCE(config if)# attack-filter protocol ICMP attack-direction single-side-source
SCE(config if)#
EXAMPLE 3
The following example disables attack detection for all non TCP, UDP, or ICMP protocols.
SCE>enable 10
Password:<cisco>
SCE#config
SCE(config)#interface LineCard 0
SCE(config if)#no attack-filter protocol other attack-direction all
SCE(config if)#
Related Commands Command Description
attack-detector
TCP-port-list|UDP-port-list
Defines the list of destination ports for specific port detections
for TCP or UDP protocols.
attack-detector <number> Configures a specific attack detector for a particular attack type
(protocol/attack direction/side) with the assigned number.
show interface LineCard
attack-filter
Displays the attack filtering configuration.
- Command Reference 1
- CONTENTS 3
- Contents 10
- OL-26797-03 10
- About this Guide 15
- Document Revision History 16
- Organization 16
- Related Publications 16
- Conventions 17
- Command-Line Interface 19
- CLI Authorization Levels 20
- CLI Command Mode Hierarchy 21
- Prompt Indications 24
- Example: 25
- CLI Help Features 28
- Command History 30
- Keyboard Shortcuts 30
- Auto-Completion 31
- FTP User Name and Password 32
- Managing Command Output 33
- Creating a CLI Script 35
- CLI Command Reference 37
- • A permit/deny field 50
- • An IP address 50
- attack-detector 58
- • Action = Report 60
- • block 67
- • report 67
- EXAMPLE 4: 69
- • SCE 2000: 1-4 92
- • SCE 1000: 1-2 92
- EXAMPLE 1 102
- EXAMPLE 2 102
- EXAMPLE 3 102
- • bypass 106
- • cutoff 106
- Release Modification 121
- EXAMPLE 1: 128
- EXAMPLE 2: 128
- Figure 2-1 Disable Command 132
- • full : full duplex 134
- • half : half duplex 134
- Figure 2-2 Enable Command 137
- • Static party DB files 141
- Example 1 146
- Example 2 147
- Example 3 147
- 255.255.0.0: 166
- (default-gateway) 184
- EXAMPLE 3: 191
- • Line-Attack-File-Log 211
- • SCE-agent-Statistics-Log 211
- • User-File-Log 211
- • fatal 222
- • error 222
- • warning 222
- CHANGING VPN MODES 254
- • Link Usage RDRs (LURs) 266
- • Package Usage RDRs (PURs) 266
- • ZoneUsage RDRs (ZURs) 266
- SCE>enable 10 274
- • RDRv1 281
- • NetflowV9 281
- • TCP when protocol = RDRv1 281
- PRIORITIES 282
- • the host ends with .com 298
- • Calling-Station-Id 315
- • NAS-port 315
- • User-Name 315
- • Any IP access 333
- • Telnet access 333
- • SNMP GET access 333
- • SNMP SET access 333
- time and date 334
- • bypassed VPNs 378
- • non-VPN-mappings 378
- • PE router configuration 378
- • owner username 383
- Counter Definitions 392
- Current values: 392
- Peak values: 393
- Event counters: 393
- • Has no mapping 395
- • translation table 413
- EXAMPLE 4 420
- EXAMPLE 5 427
- • speed 429
- • duplex 429
- • IP address 429
- • Device name 430
- • Description 430
- • Product identifier 430
- • Version identifier 430
- • Serial number 430
- • Quota rate control 446
- • main connection 452
- • snmp traps 517
- • enterprise traps 517
- IP specification: 565
- Example 1: 566
- Example 2: 567
- Example 3: 567
- Example 4 567
- 6. Action = flow-capture 568
- • 10: Admin 574
- • 15: Root 574
- • 0 : User 574
- • 5: Viewer 574
- • Link-0 578
- • Link-1 578
- • VAS server is enabled 584
- • Server has a VLAN tag 584
- Direction 596
- PIR Values 597
- Changing VPN Modes 600
Powiązane produkty i podręczniki dla Networking Cisco SCE 2000 4xGBE
Networking Cisco MC16S Instrukcja Użytkownika
(34 strony)
(34 strony)
(8 strony)
Networking Cisco CISCO1721 Przewodnik Instalacji
(92 strony)
(92 strony)
Networking Cisco 7576 Instrukcja Użytkownika
(6 strony)
(6 strony)
Networking Cisco SOHO 91 Przewodnik Instalacji
(18 strony)
(18 strony)
Networking Cisco SONET/SDH Dokumentacja
(26 strony)
(26 strony)
(44 strony)
Networking Cisco 813-RF - 813 Router Dokumentacja
(112 strony)
(112 strony)
Networking Cisco SMTP Instrukcja Użytkownika
(16 strony)
(16 strony)
(28 strony)© 2020, manymanuals.pl. Wszelkie prawa zastrzeżone. | 0.046 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Komentarze do niniejszej Instrukcji