DGS-3610 Series Configuration Guide Chapter 41 Anti-attack System Guard Configuration
If you want to restore the default value of the maximum quantity for monitored hosts, execute
the no system-guard detect-maxnum command in the global configuration mode.
41.2.6 Setting Exceptional IPs Free From
Monitoring
You may set exceptional IPs free from monitoring. Packets that meet the exceptional IPs are
allowed to be sent to the CPU.
Enter the global configuration mode.
system-guard exception-ip ip mask
Add the exceptional IP mask for anti-attack function. Up
to 255 exceptional IP entries are supported.
Return to the privileged mode.
show system-guard exception-ip
Show all exceptional IP entries.
copy running-config startup-config
In the global configuration mode, you can delete an exceptional IP entry through the no
option of this command. All exceptional IP entries can be deleted through the no and all-eip
options of this command .
For example, to delete all exceptional IPs:
DGS-3610(config)# no system-guard exception-ip all-eip
To delete a single exceptional IP:
DGS-3610(config)# no system-guard exception-ip 192.168.5.145/32
An isolated IP is still in the isolated status before being aged even if it is
among exceptional IPs. To send the IP packets to the CPU, you may
execute the clear system-guard command to cancel the isolation of the
IP.
41.2.7 Clearing the Isolation Status of
Isolated IPs
An isolated user will automatically recover after a period of isolation. To clear the isolation
manually, execute the following command in the privileged mode:
To Next Page
Loading...
Need help?
General