Zte ZXR10 5250 Series - Page 174

ZXR105250SeriesCongurationGuide
CommandFunction
zte(cfg)#createprotocol-protectmac-droprule
<1-128>src-mac<HH.HH.HH.HH.HH.HH>mask
<HH.HH.HH.HH.HH.HH>
Createsamacdroprule.
zte(cfg)#setprotocol-protectalarmport<portlist>{enable|
disable}
EnablesordisablesthePPalarm
functiononaport.
zte(cfg)#setprotocol-protectalarmport<portlist>{protocol-na
me}<0-18000>
SetsPP30second-protocolalarm
threshold.
zte(cfg)#setprotocol-protectlimit{group-name}<0-800>Setstheratelimitofsending
packetstotheCPU.
zte(cfg)#setprotocol-protectpriority{protocol-name|all}{<0-7
>|default}
SetsPPprotocolpriority.
zte(cfg)#setprotocol-protectmac-drop{disable|enable}Enablesthemacdropfunction.
zte(cfg)#setprotocol-protectmac-droprule<1-128>bindport
<portlist>
Bindsthemacdroprulewiththe
port.
zte(cfg)#clearprotocol-protectmac-dropcounter[port
<portlist>]
Clearsthenumberofmessages
droppedbythemacdropfunction.
zte(cfg)#clearprotocol-protectmac-dropport<portlist>[rule
<1-128>]
Clearsthemacdroprulesfor
speciedorallports.
zte(cfg)#clearprotocol-protectmac-droprule[<1-128>]Clearsspeciedmacdroprules.
showprotocol-protectstatistic[port<portlist>](allconguration
modes)
Displaysstatisticsinformationof
protocolpacketalarmsonaPP
port.
showprotocol-protectlimit(allcongurationmodes)DisplaysPPratelimitinformation.
showprotocol-protectpriority(allcongurationmodes)Displayspacketpriority
congurationinformation.
showprotocol-protectmac-dropport[<portlist>](allconguration
modes)
Displaystherulesandstatistics
boundwithaspeciedport.
showprotocol-protectmac-droprule[<1-128>](allconguration
modes)
Displaysspeciedmacdroprules.
PPCongurationInstance
lCongurationDescription
SeeFigure5-45,Host1sendsDHCPattackpackets.Userscanviewthedevice
operatingstatusandalarminformation.UsersalsocanviewIGMPoperatingstatus
underDHCPpacketattacks.TheroutersendsIGMPquerypacketsperiodically.
5-126
SJ-20131111172707-002|2013-11-27(R1.0)ZTEProprietaryandCondential