Contents
xiii
Cisco SCE8000 Software Configuration Guide, Rel 3.1.6S
OL-16479-01
How to display current configuration for a specified anonymous group 9-20
How to display subscribers in a specified anonymous group 9-20
How to display all subscribers currently in anonymous groups 9-20
How to display the number of subscribers in a specified anonymous group 9-20
How to display the total number of subscribers in all anonymous groups 9-20
Configuring Subscriber Aging 9-21
How to Enable Aging for Anonymous Group Subscribers 9-21
How to Enable Aging for Introduced Subscribers 9-21
How to Disable Aging for Anonymous Group Subscribers 9-21
How to Disable Aging for Introduced Subscribers 9-22
How to Set the Aging Timeout Period for Anonymous Group Subscribers 9-22
Options 9-22
How to Set the Aging Timeout Period for Introduced Subscribers 9-22
Options 9-22
How to Display Aging for Anonymous Group Subscribers 9-22
How to Display Aging for Introduced Subscribers 9-22
Configuring the SCE Platform/SM Connection 9-23
Options 9-23
How to Configure the Behavior of the SCE Platform in Case of Failure of the SM 9-23
How to Configure the SM-SCE Platform Connection Timeout 9-23
CHAPTER
10 Identifying and Preventing Distributed-Denial-Of-Service Attacks 10-1
Attack Filtering and Attack Detection 10-1
Attack Filtering 10-1
Specific Attack Filtering 10-2
Attack Detection 10-3
Attack Detection Thresholds 10-4
Attack Handling 10-4
Subscriber Notification 10-5
Hardware Filtering 10-5
Configuring Attack Detectors 10-6
Enabling Specific-IP Detection 10-8
Options 10-9
How to Enable Specific-IP Detection 10-9
How to Enable Specific-IP Detection for the TCP Protocol Only for all Attack Directions 10-9
How to Enable Specific-IP Detection for the TCP Protocol for Port-based Detections Only for
Dual-sided Attacks 10-9
How to Disable Specific-IP Detection for Protocols Other than TCP, UDP, and ICMP for all Attack
Directions 10-10