578
Field Descri
tion
Exempt IPv4 ACL IPv4 ACL used for attack detection exemption.
Exempt IPv6 ACL IPv6 ACL used for attack detection exemption.
Actions
Attack prevention actions:
• CV—Client verification.
• BS—Blocking sources.
• L—Logging.
• D—Dropping packets.
• N—No action.
Signature attack defense
configuration
Configuration information about single-packet attack detection and
prevention.
Signature name Type of the single-packet attack.
Defense Whether attack detection is enabled.
Level Level of the single-packet attack, info, low, medium, or high.
Actions
Prevention actions against the single-packet attack:
• L—Logging.
• D—Dropping packets.
• N—No action.
Scan attack defense
configuration
Configuration information about scanning attack detection and prevention.
Defense Whether attack detection is enabled.
Level Level of the scanning attack detection, low, medium, or high.
Actions
Prevention actions against the scanning attack:
• BS—Blocking sources.
• D—Dropping packets.
• L—Logging.
Flood attack defense
configuration
Configuration information about flood attack detection and prevention.
Flood type
Type of the flood attack:
• ACK flood.
• DNS flood.
• FIN flood.
• ICMP flood.
• ICMPv6 flood.
• SYN flood.
• SYN-ACK flood.
• UDP flood.
• RST flood.
• HTTP flood.
Global thres (pps)
Global threshold for triggering the flood attack prevention, in units of
packets sent to an IP address per second. The default is 1000 pps.