ELTEX ESR-3100 - Page 490

ESR series service routers.ESR-Series. User manual
490
•
•
•
•
•
•
•
•
•
•
•
•
•
Step Description Command Keys
unusual-client-port-
connection – the client
used an unusual port.
network-scan – network
scan was detected.
denial-of-service –
denial of service attack
was detected.
non-standard-protocol –
custom protocol or
event was detected.
protocol-command-
decode – encryption
attempt was detected.
web-application-activity
– access to a potentially
vulnerable web
application.
web-application-attack –
attack on web
application.
misc-activity – other
activity.
misc-attack – other
attacks.
icmp-event – general
ICMP event.
inappropriate-content –
inappropriate content
was detected.
policy-violation –
potential breach of
corporate privacy.
default-login-attempt –
login attempt using a
standard login/
password.
14 Set DSCP code value for which the rule
should work (optional).
esr(config-ips-category-rule)# ip
dscp <DSCP>
<DSCP> – DSCP code value,
takes values in the range of
[0..63].
15 Set the packet lifetime (TTL) value for
which the rule will trigger (optional).
esr(config-ips-category-rule)# ip
ttl <TTL>
<TTL> – TTL value, takes
values in the range of [1..255].
16 Set number of IP for which the rule
should work (optional).
Applicable only for protocol any value.
esr(config-ips-category-rule)# ip
protocol-id <ID>
<ID> – IP identification number,
takes values of [1..255].
17 Set ICMP CODE value for which the rule
should trigger (optional).
Applicable only for protocol icmp value.
esr(config-ips-category-rule)# ip
icmp code <CODE>
<CODE> – ICMP CODE value,
takes a value in the range
[0..255].