Ruijie RG-S2600G-I Series - Page 840

CLI Reference NFPP Configuration Commands
Examples
Ruijie(config)# interface G 0/1
Ruijie(config-if)# nfpp icmp-guard policy per-src-ip 5 10
Ruijie(config-if)# nfpp icmp-guard policy per-port 100 200
Related
commands
Command
Description
icmp
-guar
d
attac
k-thr
esho
ld
Set the global attack threshold.
icmp
-guar
d
rate-l
imit
Set the global rate-limit threshold.
show nfpp
icmp-guard
summary
Show the configurations.
show nfpp
icmp-guard hosts
Show the monitored host.
clear nfpp
icmp-guard hosts
Clear the isolated host.
IP-guard Configuration
Commands
The IP-guard configuration commands include:
 Caution
It is worth mentioning that ip-guard is for the attack of the IP packets whose
destination IP address is not the local one. CPP(CPU Protect Policy) limits
the rate of the IP packets whose destination IP address is the local one.
IP-guard is not supported for the layer 2 switches and only supported for the
layer 3 switches.
ip-guard attack-threshold
Use this command to set the global attack threshold. When the packet rate exceeds the attack threshold,
the attack occurs.
ip-guard attack-threshold { per-src-ip | per-port} pps