Cisco SCE8000 Dokumentacja Strona 63
- Strona / 778
- Spis treści
- BOOKMARKI
Oceniono. / 5. Na podstawie oceny klientów
2-23
Cisco SCE 8000 CLI Command Reference
Chapter 2 CLI Command Reference
attack-detector default
attack-detector default
Defines default thresholds and attack handling action. If a specific attack detector is defined for a
particular situation (protocol, attack direction, or side), the detector overrides the defaults.
To delete the user-defined defaults, use the no form of this command. The system defaults are used
instead.
attack-detector default protocol protocol attack-direction attack-direction side side [action
action] [open-flows open-flows] [ddos-suspected-flows ddos-suspected-flows]
[suspected-flows-ratio suspected-flows-ratio] [notify-subscriber | dont-notify-subscriber]
[alarm |noalarm]
no attack-detector default protocol protocol attack-direction attack-direction side side [action
action] [open-flows open-flows] [ddos-suspected-flows ddos-suspected-flows]
[suspected-flows- ratio suspected-flows-ratio]
Syntax Description
Command Default The default attack detector uses the following default values:
• Action—report
• Thresholds—varies according to the attack type
• Subscriber notification—disabled
• Sending an SNMP trap—disabled
Command Modes Interface Linecard Configuration
Command History This table includes the following release-specific history entries:
protocol For protocol, choose TCP, UDP, IMCP, or other.
attack-direction For attack-direction, choose attack-source, attack-destination, or both.
side For size, choose subscriber, network, or both.
action For action, choose report or block.
open-flows Threshold for concurrently open flows (new open flows per second).
ddos-suspected-flows Threshold for DDoS-suspected flows (new suspected flows per second).
suspected-flows-ratio Threshold for ratio of suspected flow rate to open flow rate.
notify-subscriber,
dont-notify-subscriber
Enables or disables subscriber notification.
alarm, noalarm Enables or disables sending of SNMP traps.
Release Modification
2.5.7 This command was introduced.
- Cisco Systems, Inc 1
- CONTENTS 3
- Contents 10
- About This Guide 19
- Document Revision History 20
- Organization 20
- Related Publications 20
- Conventions 21
- Command-Line Interface 23
- CLI Authorization Levels 24
- CLI Command Mode Hierarchy 25
- • E1: interface Linecard 0 27
- • E3: (traffic ports) 27
- Prompt Indications 28
- Example: 29
- CLI Help Features 31
- Argument Help 32
- Command History 34
- Keyboard Shortcuts 34
- Auto-Completion 35
- FTP User Name and Password 36
- Managing Command Output 37
- Creating a CLI Script 39
- CLI Command Reference 41
- • 0 (user) 43
- • 5 (viewer) 43
- • 10 (admin) 43
- • 15 (root) 43
- • none—Use no authentication 48
- EXAMPLE 1 54
- EXAMPLE 2 54
- • Permit/deny field 56
- • attack-detector 62
- • access-list 62
- • Action—report 63
- command to disable it 95
- is 60 minutes 123
- General Guidelines 124
- Recurring Configurations 124
- Specifying Explicit Days 125
- Example 1 125
- Example 2 125
- Example 3 125
- • /system/preconf 143
- • /system/prevconf 144
- Disable multi-mapping: 163
- Load Balancing 176
- High Availability (Failover) 176
- Figure 2-1 Disable Command 181
- • full—Full duplex 183
- • half—Half duplex 183
- Figure 2-2 Enable Command 185
- • Must begin with a letter 186
- • Cannot contain spaces 186
- • Are case-sensitive 186
- • General configuration files 190
- • Static party DB files 190
- • start—Starts recording 195
- • stop—Stops recording 195
- Command Description 206
- EXEC authorization level 214
- • global-controller bandwidth 222
- • global-controller name 222
- EXAMPLE 1: 249
- EXAMPLE 2: 249
- Ipv6-IANA 271
- • warning 292
- • Adding an entry 297
- • Removing an entry 297
- • traffic-engineering skip 327
- • vpn skip 327
- • END_USER_E164 343
- • END_USER_IMSI 343
- • END_USER_NAI 343
- • END_USER_SIP-URI 343
- • END_USER_PRIVATE 343
- • Link Usage RDRs (LURs) 353
- • Package Usage RDRs (PURs) 353
- • Category 1—40 MB 364
- • Category 2—24 MB 364
- • Category 3—8 MB 364
- • Category 4—8 MB 364
- Priorities 369
- Table 2-8 Valid Mode Settings 373
- • The host ends with .com 384
- User Authorization Guidelines 390
- • Calling station ID 401
- • NAS port 401
- • Username 401
- • CDP mode 422
- Counter Definitions 514
- Current values: 514
- Peak values: 514
- Event counters: 515
- • Has no mapping 517
- Examples Example 1 521
- Example 4 522
- TP-IP-range 533
- EXAMPLE 3 542
- EXAMPLE 4 542
- • duplex 550
- • IP address 550
- • auto-fail-over 550
- • Quota rate control 574
- • Maximum size of the buffer 574
- SCE8000> 597
- • Main connection 602
- SCE8000(config)#> 678
- • SNMP traps 683
- • Enterprise traps 683
- Authorization: admin 686
- Examples 686
- IP specification 740
- Port specification 741
- Tunnel ID specification 741
- Traffic counter name 741
- • Action = flow-capture 743
- IP Specification 744
- Limitations 747
- • Link-0 757
- • Link-1 757
- • VAS server is enabled 759
- • Server has a VLAN tag 759
- • Server Group ID 764
- • SCE 8000: 0-63 764
- Direction 771
- PIR Values 772
© 2020, manymanuals.pl. Wszelkie prawa zastrzeżone. | 0.031 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Komentarze do niniejszej Instrukcji