Cisco SCE8000

To Next Page

To Previous Page

10-30

Cisco SCE8000 Software Configuration Guide, Rel 3.1.6S

OL-16479-01

Chapter 10 Identifying and Preventing Distributed-Denial-Of-Service Attacks

Monitoring Attack Filtering

Main Page

Default Chapter3
- Table of Contents3
- Cisco Service Control Solution21
Chapter 1 Cisco Service Control Overview22
- SCE Platform Description23
- Management and Collection24
  - Network Management25
  - Service Configuration Management26
- Getting Help27
Chapter 2 Command Line Interface28
- CLI Command Hierarchy29
- Prompt Indications31
- CLI Help Features32
- CLI Authorization Levels37
  - How to Change from User to Viewer Level Authorization38
  - How to Log in with Root Level Authorization38
- Exiting Modes38
  - How to Exit from the Privileged Exec Mode and Revert to the Viewer Mode39
  - How to Exit from the Global Configuration Mode39
- Navigating between Configuration Modes39
  - Entering and Exiting Global Configuration Mode39
    - How to Enter the Global Configuration Mode39
    - How to Exit the Global Configuration Mode40
  - Interface Configuration Modes40
- Creating a CLI Script43
CHAPTER 3 Basic Cisco SCE8000 Platform Operations45
- Starting the Cisco SCE8000 Platform45
- Managing Configurations47
- How to Display the SCE Platform Version Information52
  - Example for Displaying the SCE Platform Version Information52
- How to Display the SCE Platform Inventory54
Utilities61
- Working with SCE Platform Files61
  - Working with Directories61
Chapter 4 Utilitie62
- Working with Files63
- The User Log65
- The Logging System65
- Copying the User Log66
- Enabling and Disabling the User Log66
- Viewing the User Log Counters66
- Viewing the User Log67
- Clearing the User Log67
  - Generating a File for Technical Support67
    - Generating a File for Technical Support: Example67
CHAPTER 5 Configuring the Management Interface and Security69
- About Management Interface and Security69
- Configuring the Management Port70
- How to Enter Management Interface Configuration Mode70
- Configuring the Management Port Physical Parameters70
- C H a P T E R 5 Configuring the Management Interface and Security70
- Setting the IP Address and Subnet Mask of the Management Interface71
  - Options71
  - Setting the IP Address and Subnet Mask of the Management Interface: Example71
- Configuring the Management Interface Speed and Duplex Parameters71
- How to Monitor the Management Interface73
- Configuring the Available Interfaces74
- Configuring and Managing the SNMP Interface93
- IP Configuration101
- Configuring Time Clocks and Time Zone106
  - Displaying the System Time106
    - Displaying the System Time: Example106
- Displaying the Calendar Time107
  - Displaying the Calendar Time: Example107
- Setting the System Clock107
  - Options107
  - Setting the System Clock: Example107
- Setting the Calendar107
  - Setting the Calendar: Example108
- Setting the Time Zone108
  - Options108
  - Setting the Time Zone: Example108
Step 1109
- Guidelines110
- How to Define Recurring Daylight Saving Time Transitions110
- How to Define Non-Recurring Daylight Saving Time Transitions111
- How to Cancel the Daylight Saving Time Configuration111
- How to Display the Current Daylight Saving Time Configuration111
- Removing the Current Time Zone Setting109
  - Domain Name Server (DNS) Settings112
- Configuring Daylight Saving Time109
  - Options109
Chapter 6 Configuring the Line Interface115
- Line Interfaces115
- Tunneling Protocols116
- Configuring Traffic Rules and Counters122
- DSCP Marking130
  - How to Display the DSCP Marking Configuration130
- Counting Dropped Packets130
  - About Counting Dropped Packets130
  - Disabling the Hardware Packet Drop131
CHAPTER 7 Configuring the Connection133
- Configuring the Connection Mode133
  - Options133
  - Configuring the Connection Mode Example134
Monitoring the Connection Mode134
- Monitoring the Connection Mode: Example135
Configuring the Link Mode135
- About the Link Mode135
- Options135
External Optical Bypass136
- How to Activate the External Bypass137
- How to Deactivate the External Bypass137
- How to Set the External Bypass to the Default State137
- How to Display the State of the External Bypass138
Link Failure Reflection138
- How to Enable Link Failure Reflection138
- How to Disable Link Failure Reflection138
- Enabling and Disabling Link Failure Reflection on All Ports139
- Configuring Link Failure Reflection in Linecard-Aware Mode140
  - How to Enable Linecard-Aware Mode140
  - How to Disable Linecard-Aware Mode140
Asymmetric Routing Topology141
- Asymmetric Routing and Other Service Control Capabilities141
- Enabling Asymmetric Routing142
- Monitoring Asymmetric Routing142
  - Monitoring Asymmetric Routing: Example142
Configuring a Forced Failure143
- How to Force a Virtual Failure143
- How to Exit from a Virtual Failure143
Configuring the Failure Recovery Mode143
- Options144
- Configure the Failure Recovery Mode: Examples144
Configuring the SCE Platform/Sm Connection144
- Configuring the Behavior of the SCE Platform in Case of Failure of the SM145
  - Options145
- Configuring the SM-SCE Platform Connection Timeout145
CHAPTER 8 Raw Data Formatting: the RDR Formatter and Netflow Exporting147
- RDR Formatter and Netflow Exporting Support147
  - Netflow148
  - Data Destinations149
- Configuring Data Destinations and Categories152
Managing Subscribers165
- Information about Subscribers165
  - Subscriber Modes in Service Control Solutions166
Chapter 9 Managing Subscriber166
- Subscriber Mapping Limits167
- Aging Subscribers167
- Anonymous Groups and Subscriber Templates168
- Subscriber Files168
  - Subscriber Default Csv File Format168
  - Subscriber Anonymous Groups Csv File Format168
- Importing and Export Ingsubscriber Information169
- Options170
- How to Import Subscriber Information170
- How to Export Subscriber Information170
- How to Import a Subscriber Template170
- How to Export a Subscriber Template171
- How to Remove a Specific Subscriber171
  - Options171
- How to Remove All Introduced Subscribers172
- How to Remove a Specific Anonymous Subscriber172
  - Options172
- How to Remove All Anonymous Subscriber Groups172
- How to Remove All Anonymous Subscribers172
- How to Remove All Subscriber Templates173
- How to Remove Subscribers by Device173
  - How to Remove Subscribers from the SM173
  - How to Remove Subscribers from a Specified SCMP Peer Device173
- Importing and Exporting Anonymous Groups173
  - How to Import Anonymous Groups174
    - Options174
  - How to Export Anonymous Groups174
- Monitoring Subscribers174
  - How to Monitor the Subscriber Database175
    - How to Display the Subscriber Database Counters175
    - Clearing the Subscriber Database Counters176
  - Displaying Subscribers176
  - How to Display Subscriber Information181
  - Displaying Anonymous Subscriber Information183
- Configuring Subscriber Aging185
  - How to Enable Aging for Anonymous Group Subscribers185
  - How to Enable Aging for Introduced Subscribers185
  - How to Disable Aging for Anonymous Group Subscribers185
  - How to Disable Aging for Introduced Subscribers186
  - How to Set the Aging Timeout Period for Anonymous Group Subscribers186
    - Options186
  - How to Set the Aging Timeout Period for Introduced Subscribers186
  - How to Display Aging for Anonymous Group Subscribers186
  - How to Display Aging for Introduced Subscribers186
- Configuring the SCE Platform/Sm Connection187
  - Options187
  - How to Configure the Behavior of the SCE Platform in Case of Failure of the SM187
  - How to Configure the SM-SCE Platform Connection Timeout187
CHAPTER 10 Identifying and Preventing Distributed-Denial-Of-Service Attacks189
- Attack Filtering and Attack Detection189
- Configuring Attack Detectors194
- Subscriber Notifications205
  - Configuring the Subscriber Notification Port205
    - Options205
  - How to Remove the Subscriber Notification Port205
- Preventing and Forcing Attack Detection206
- Options206
  - Preventing Attack Filtering207
  - Monitoring Attack Filtering208
- How to Display a Specified Attack Detector Configuration211
- How to Display the Default Attack Detector Configuration212
- How to Display Filter State (Enabled or Disabled)213
- How to Display Configured Threshold Values and Actions213
- How to Display All Attack Detector Configurations213
- How to Display the Current Counters215
- How to Display All Currently Handled Attacks215
- How to Display All Existing Force-Filter Settings215
- How to Display All Existing Don't-Filter Settings215
- How to Display the List of Ports Selected for Subscriber Notification215
- How to Find out Whether Hardware Attack Filtering Has Been Activated216
  - About SCMP219
    - SCMP Terminology220
Chapter 11 Managing the SCMP220
- Deployment Scenarios221
  - Single ISG Router with a Single SCE Platform (1Xisg - 1Xsce)221
  - Multiple ISG Routers with Multiple SCE Platforms Via Load Balancing (Nxisg - Mxsce)222
- SCMP Peer Devices222
  - Connection Management223
- SCMP Subscriber Management224
  - GUID and Subscriber ID224
- Configuring SCMP Parameters224
- Adding an SCMP Peer Device227
  - How to Define an SCMP Peer Device227
  - How to Assign the SCMP Peer Device to an Anonymous Group227
- Deleting Subscribers Managed by an SCMP Peer Device229
  - Options229
- Deleting an SCMP Peer Device229
- Defining the Subscriber ID229
  - Options230
- Configuring the RADIUS Client230
- Monitoring the SCMP Environment231
  - How to Monitor the SCMP231
  - Monitoring the RADIUS Client233
Appendix235
Cisco Service Control Mibs235
- MIB Files235
- Loading Mibs238
- Pcube to Cisco MIB Mapping238
  - Pcube Engage MIB (CISCO-SCA-BB-MIB239
  - Pcube to Cisco MIB Mapping: Detailed OID Mappings239
Appendix259
Monitoring SCE Platform Utilization259
- SCE Platform Utilization Indicators259
- Service Loss260
  - Monitoring Service Loss261

Table of Contents

Other manuals for Cisco SCE8000

Related product manuals