HP ProCurve 3500yl Series User Manual

Virus Throttling
Configuring and Applying Connection-Rate ACLs
For more on ACE masks, refer to “How an ACE Uses a Mask To Screen Packets
for Matches” in the chapter titled “Access Control Lists” in the Advanced
Traffic Management Guide for your switch.
Example of Using an ACL in a Connection-Rate
Configuration
This example adds connection-rate ACLs to the basic example on page 3-14.
Server
Company
Intranet
VLAN 1
15.45.100.1
VLAN 10
15.45.200.1
5400zl Switch
Server
VLAN 15
15.45.300.1
Switch
Server
Server
Switch
Switch
A
B
C
D
E
H
F
G
B1
B2
B3
B9
B4
D1
D2
IP Address:
15.45.100.7
IP Address: 15.45.50.17
Figure 3-10. Sample Network
In the basic example on page 3-14, the administrator configured connection-
rate blocking on port D2. However:
■ The administrator has elevated the connection-rate sensitivity to high.
■ The server at IP address 15.45.50.17 frequently transmits a relatively
high rate of legitimate connection requests, which now triggers
connection-rate blocking of the server’s IP address on port D2. This
causes periodic, unnecessary blocking of access to the server.
3-27

HP ProCurve 3500yl Series Specifications

General

Model	HP ProCurve 3500yl Series
Switching Capacity	176 Gbps
Layer	Layer 3
Input Voltage	100-240 VAC
PoE	Available on some models
Management	Web, CLI, SNMP
Routing Protocol	RIP, OSPF, BGP
Remote Management Protocol	Telnet
Features	VLAN
Power Consumption Operational	Varies by model
Memory	256 MB
Power Supply	Internal
Security Features	802.1X, RADIUS, TACACS+
Ports	24 or 48 x 10/100/1000Base-T ports