Configuration Guide NFPP Configuration
Return to the privileged EXEC mode.
Ruijie# configure terminal
Enter the global configuration mode.
Ruijie(config)# interface interface-name
Enter the interface configuration mode.
Ruijie(config-if)#nfpp icmp-guard policy
per-port rate-limit-pps attack-threshold-pps
Configure the rate-limit and attack
threshold on the specified interface.
rate-limit-pps: set the rate-limit
threshold. The valid range is 1-9999
and by default, it adopts the global
rate-limit threshold value.
attack-threshold-pps: set the attack
threshold. The valid range is 1-9999
and by default, it adopts the global
attack threshold value.
Return to the privileged EXEC mode.
Ruijie(config-if)# show nfpp icmp-guard
summary
Show the parameter settings.
Ruijie# copy running-config
startup-config
The source IP address-based rate limit takes precedence over
port-based rate limit.
Configuring the trusted hosts
Use the following commands to set the trusted host to make a host free from
monitoring. The ping packets are allowed to be sent to the CPU from the
trusted host.
Ruijie# configure terminal
Enter the global configuration mode.
Enter the nfpp configuration mode.
Ruijie(config-nfpp)# icmp-guard
trusted-host ip mask
Configure the IP address range for the
trusted hosts. Up to 500 pieces of IP
addresses can be configured.
To Next Page
Loading...
