CLI Reference NFPP Configuration Commands
nfpp ip-guard policy
Use this command to set the rate-limit threshold and the attack threshold.
nfpp ip-guard policy { per-src-ip | per-port} rate-limit-pps attack-threshold-pps
Set the rate-limit threshold and the
attack threshold for each source IP
address.
Set the rate-limit threshold and the
attack threshold for each port.
Set the rate-limit threshold with the
valid range of [1, 9999].
Set the attack threshold with the
valid range of [1, 9999].
By default, the rate-limit threshold and the attack threshold are not
configured.
Interface configuration mode.
The attack threshold value shall be equal to or greater
than the rate-limit threshold.
Ruijie(config)# interface G 0/1
Ruijie(config-if)# nfpp ip-guard policy per-src-ip 2 10
Ruijie(config-if)# nfpp ip-guard policy per-port 50 100
ip-gu
ard
attac
k-thr
esho
ld
Set the global attack threshold.
Set the global rate-limit threshold.