Command Reference NFPP Commands
nfpp icmp-guard policy
Use this command to set the rate-limit threshold and the attack threshold.
nfpp icmp-guard policy { per-src-ip | per-port } rate-limit-pps attack-threshold-pps
Parameter
Description
Parameter Description
per-src-ip
Set the rate-limit threshold and the attack threshold for each source
IP address.
per-port
Set the rate-limit threshold and the attack threshold for each port.
rate-limit-pps
Set the rate-limit threshold with the valid range of [1, 9999].
attack-threshold-pps
Set the attack threshold with the valid range of [1, 9999].
Defaults
By default, the rate-limit threshold and the attack threshold are not configured.
Command
Mode
Interface configuration mode.
Usage Guide
The attack threshold value shall be equal to or greater than the rate-limit threshold.
Configuration
Examples
Ruijie(config)# interface G 0/1
Ruijie(config-if)# nfpp icmp-guard policy per-src-ip 5 10
Ruijie(config-if)# nfpp icmp-guard policy per-port 100 200
Related
Commands
Command Description
icmp-guard attack-threshold
Set the global attack threshold.
icmp-guard rate-limit
Set the global rate-limit threshold.
show nfpp icmp-guard summary
Show the configurations.
show nfpp icmp-guard hosts
Show the monitored host.
clear nfpp icmp-guard hosts
Clear the isolated host.
Platform
Description
N/A
nfpp ip-guard enable
Use this command to enable the ICMP anti-attack function on the interface.
nfpp ip-guard enable
Parameter
Description
Parameter Description
N/A N/A