H3C S3100 Series

5-1
5 System-Guard Configuration (For S3100-SI)
The configuration introduced in this chapter is only supported by the S3100-SI series switches.
System-Guard Overview
The system-guard function checks system-guard-enabled ports regularly to determine if the ports are
under attack. With this function enabled, if the number of the packets received by a
system-guard-enabled port exceeds the set threshold, the port is regarded to be under attack. The
switch then limits the rate of the port and resumes port checking operation after a specific period
elapses.
System-Guard Configuration
The system guard configuration includes:
z Enabling the system-guard function
z Configuring system-guard-related parameters
z Specifying system-guard-enabled ports
Enabling the System-Guard function
Table 5-1 lists the operations to enable the system-guard function.
Table 5-1 Enable the system-guard function
Operation Commands Description
Enter system view
system-view
—
Enable the system-guard
function
system-guard enable
Required
By default, The system-guard function
is disabled.
Configuring System-Guard-Related Parameters
Table 5-2 lists the operations to configure system-guard-related parameters, including system-guard
mode, checking interval, threshold (in terms of the number of the received packets), and controlling
period. Note that the configuration takes effect only after you enable the system-guard function.