574
slot slot-number: Specifies a card by its slot number. This option is available only when you specify a
global interface, such as a VLAN interface or tunnel interface. If no card is specified, this command
displays IPv6 flood attack detection and prevention statistics on all cards. (MSR4000.)
count: Displays the number of matching protected IPv6 addresses.
Usage guidelines
The device collects statistics about protected IP addresses for flood attack detection and prevention. The
attackers' IP addresses are not recorded.
If the interface and local parameters are not specified, this command display IPv6 flood attack detection
and prevention statistics on all interfaces and the device.
Examples
# (MSR1000/MSR2000/MSR3000.) Display flood attack detection and prevention statistics for all IPv6
addresses.
<Sysname> display attack-defense flood statistics ipv6
IPv6 address VPN Detected on Detect type State PPS Dropped
2000::1011 a0123456789 GE2/1/2 SYN-FLOOD Normal 0 4294967295
1::2 1222232 GE2/1/2 DNS-FLOOD Normal 1000 111111111
1::3 -- GE2/1/3 SYN-ACK-FLOOD Normal 1000 222222222
1::4 -- GE2/1/4 ACK-FLOOD Normal 1000 111111111
1::5 -- GE2/1/5 SYN-FLOOD Normal 1000 22222222
# (MSR4000.) Display flood attack detection and prevention statistics for all IPv6 addresses.
<Sysname> display attack-defense flood statistics ipv6
Slot 1:
IPv6 address VPN Detected on Detect type State PPS Dropped
2000::1011 a0123456789 GE2/1/2 SYN-FLOOD Normal 0 4294967295
1::2 1222232 GE2/1/2 DNS-FLOOD Normal 1000 111111111
1::3 -- GE2/1/3 SYN-ACK-FLOOD Normal 1000 222222222
1::4 -- GE2/1/4 ACK-FLOOD Normal 1000 111111111
1::5 -- GE2/1/5 SYN-FLOOD Normal 1000 22222222
Slot 2:
IPv6 address VPN Detected on Detect type State PPS Dropped
2000::1011 a0123456789 GE2/1/2 SYN-FLOOD Normal 0 4294967295
1::2 1222232 GE2/1/2 DNS-FLOOD Normal 1000 111111111
1::3 -- GE2/1/3 SYN-ACK-FLOOD Normal 1000 222222222
1::4 -- GE2/1/4 ACK-FLOOD Normal 1000 111111111
1::5 -- GE2/1/5 SYN-FLOOD Normal 1000 22222222
# (MSR1000/MSR2000/MSR3000.) Display the number of IPv6 addresses that are protected against
flood attacks.
<Sysname> display attack-defense flood statistics ipv6 count
Totally 5 flood entries.
# (MSR4000.) Display the number of IPv6 addresses that are protected against flood attacks.
<Sysname> display attack-defense flood statistics ipv6 count
Slot 1:
Totally 5 flood entries.
Slot 2:
Totally 5 flood entries.