958 ExtremeWare Software 7.3.0 Command Reference Guide
Security Commands
unconfigure enhanced-dos-protect rate-limit
unconfigure enhanced-dos-protect rate-limit [threshold | drop-probability |
learn-window | protocol] ports <portlist>
Description
Removes ports from rate limiting or resets the rate limiting configuration for enhanced denial of service
protection to default parameter values for the selected ports.
Syntax Description
Default
The default threshold on Fast Ethernet ports is 100 pkts/learn window.
The default threshold on Gigabyte ports is 100 pkts/learn window.
The default drop-probability is 50 percent.
The default learn-window value is 10 seconds.
Rate limiting is applied by default to ICMP packets.
Usage Guidelines
Use this command to remove ports from rate limiting, or reset the rate-limit threshold, drop probability,
learning window, or packet protocol. To verify settings, use the
show enhanced-dos-protect
rate-limit
command.
Example
The following command resets the rate limiting threshold on Fast Ethernet port 3 to the default value,
100 packets:
unconfigure enhanced-dos-protect rate-limit threshold ports 3
The following command resets the rate limiting drop probability on port 4 to the default value, 50
percent:
unconfigure enhanced-dos-protect rate-limit drop-probability ports 4
threshold Resets to the default value the number of packets allowed on a given port within the
learning window before the rate limit is applied. The default on Fast Ethernet ports is
100 pkts/learn window. The default on Gigabyte ports is 100 pkts/learn window.
drop-probability Resets to the default value the percentage of slow-path traffic to be dropped per port.
The default value is 50 percent.
learn-window Resets to the default value the number of seconds for the learning window per port.
This value is the duration of time to be considered to reach the rate limit threshold.
The default value is 10 seconds.
protocol [all | icmp] Resets to the default value the protocol packets to which rate limiting is applied. By
default, rate limiting is applied to Internet Control Message Protocol (ICMP) packets.
portlist Specifies one or more ports or slots and ports. On a modular switch, can be a list of
slots and ports. On a stand-alone switch, can be one or more port numbers. May be
in the form 1, 2, 3-5, 2:*, 2:5, 2:6-2:8.
To Next Page
Loading...
Need help?
General
