Operation Manual – 802.1x-System Guard
H3C S3100 Series Ethernet Switches Chapter 4 System-Guard Configuration (For S3100-EI)
4-2
Operation Command Description
Enable system-guard on
specified ports
system-guard permit
interface-list
Required
By default, the system-guard
function is disabled on a port.
Set the threshold for the
number of packets when
an attack is detected
system-guard
detect-threshold
threshold-value
Optional
The default threshold value is
200 packets.
Set the length of the
isolation after an attack is
detected
system-guard
timer-interval
isolate-timer
Optional
By default, the length of the
isolation after an attack is
detected is 10 minutes.
4.3 Displaying and Maintaining System-Guard
After the above configuration, execute the display command in any view to display the
running status of the system-guard feature, and to verify the configuration.
Table 4-2 Display and maintain system-guard
Operation Command
Display the record of detected attacks
display system-guard attack-record
Display the state of the system-guard
feature
display system-guard state