例如修改ICMP的报文上送速率为1000pps,丢弃ttl=1上送的报文。 <HUAWEI>system-view[~HUAWEI]cpu-defend policy 1[*HUAWEI-cpu-defend-policy-1]car packet-type icmp pps 1000[*HUAWEI-cpu-defend-policy-1]deny packet-type ttl-expired[*HUAWEI-cpu-defend-policy-1]quit[*HUAWEI]cpu-defend-policy 1[*HUA...
Applied cpu-defend policy 20 to slot 10: # slot 10 cpu-defend-policy 20 # Configure the icmp cir value to 16 kbps: # cpu-defend policy 20 car icmp cir 16 # CIR Configuration: 16 kilobits per second Fast ping with large buffer size (time interval = 10 ms): 1 second = 1000 millise...
<AR2220>display cpu-defend policy xdhg Related slot : <0> BlackList Status : Slot<0> : Success Configuration : Blacklist 1 ACL number : 4000 Deny packet-type igmp Rate-limit all-packets : 1500(pps)(default) 在cpu-defend的策略里面添加黑名单,并在全局下面启用,启用cpu黑名单之后,路由器不会...
<HUAWEI> system-view [~HUAWEI] cpu-defend policy 1 [*HUAWEI-cpu-defend-policy-1] car packet-type icmp pps 1000 [*HUAWEI-cpu-defend-policy-1] deny packet-type ttl-expired [*HUAWEI-cpu-defend-policy-1] quit [*HUAWEI] cpu-defend-policy 1 [*HUAWEI] commit Configure a blacklist to disab...
Çözüm Increase the value of CP-CAR to enable the ping operation to function normally. The configuration is as follows: cpu-defend policy 2 car icmp cir 4000 slot 2 cpu-defend-policy 2
在设备支持堆叠的情况下,使用cpu-defend-policy global命令在所有堆叠设备上绑定相同的防攻击策略,通过display cpu-defend configuration all命令可以查看在所有堆叠设备上相同的CAR配置信息。 使用实例 # 查看CAR配置信息。 <HUAWEI>display cpu-defend configuration allCar configurations on mainboard. --- Packet Name...
cpu-defend-policy deny description (attack defense policy view) display auto-defend attack-source display cpu-defend configuration display cpu-defend policy display cpu-defend rate display cpu-defend statistics display snmp-agent trap feature-name securitytrap all reset auto-defend attack-source reset ...
By default, the rate limit of protocol packets in the default policy is displayed. Example # Display rate limit configuration about the packets transmitted through CAPWAP tunnels. <HUAWEI> display cpu-defend configuration wireless Rate configurations on main board. --- Packet-type Status Rate-limit...
By default, the rate limit of protocol packets in the default policy is displayed. Example # Display rate limit configuration about the packets transmitted through CAPWAP tunnels. <HUAWEI> display cpu-defend configuration wireless Rate configurations on main board. --- Packet-type Status Rate-limit...
例如修改ICMP的报文上送速率为1000pps,丢弃ttl=1上送的报文。 <HUAWEI> system-view [~HUAWEI] cpu-defend policy 1 [*HUAWEI-cpu-defend-policy-1] car packet-type icmp pps 1000 [*HUAWEI-cpu-defend-policy-1] deny packet-type ttl-expired [*HUAWEI-cpu-defend-policy-1] quit [*HUAWEI] cpu-defen...