Zte ZXR10 8900 Series - Configuring Ipv6 Protocol Protection

Chapter16CPUAttackProtectionConguration
Step
CommandFunction
1
ZXR10(config-if)#ipv4protocol-protectmode
<protocolname>{enable|disable}
ThissetsIPv4protocol
protectionfunction
2
ZXR10(config-if)#ipv4protocol-protectalarmmode
<protocolname><alarm-limit>
Thisconguresalarmlimitof
IPv4protocolprotection
3
ZXR10(config-if)#ipv4protocol-protect
average-ratemode<protocol-name><10-600>
Thiscongurestheaverage
rateofIPv4protocols
4
ZXR10(config-if)#ipv4protocol-protectpeak-rate
mode<protocol-name><100-1000>
Thisconguresthepeakrate
ofIPv4protocols
Note:
IPv4protocolsthataresupportedbyCPUattackprotectioninclude
ospf,pim,igmp,vrrp,icmp,arpreply,arprequest,groupmng,
vbase,vrrparp,dhcp,rip,bgp,telnet,ldp_tcp,ldp_udp,ttl=1,
bpdu,snmp,msdpandradius.
ConfiguringIPv6ProtocolProtection
TocongureIPv6protocolprotection,performthefollowingsteps.
Step
CommandFunction
1
ZXR10(config-if)#ipv6protocol-protectmode
<protocolname>{enable|disable}
ThissetsIPv6protocol
protectionfunction
2
ZXR10(config-if)#ipv6protocol-protectalarmmode
<protocolname><alarm-limit>
Thisconguresalarmlimitof
IPv6protocolprotection
3
ZXR10(config-if)#ipv6protocol-protect
average-ratemode<protocol-name><10-600>
Thiscongurestheaverage
rateofIPv6protocols
4
ZXR10(config-if)#ipv6protocol-protectpeak-rate
mode<protocol-name><100-1000>
Thisconguresthepeakrate
ofIPv6protocols
CondentialandProprietaryInformationofZTECORPORATION153