ZXR10CommandManual(SecurityVolume)
Syntaxtcpsynflood-protectone-minute{high<highlimit>|low<low
limit>}
notcpsynflood-protectone-minute
Syntax
Description
<highlimit>Thehighestvalue,range:1~100
<lowlimit>Thelowestvalue,range1~100
DefaultsThehighlimitvalueis80andthelowlimitvalueis50bydefault.
Instructions�Theplatformversion4.8.20andupgradeversionssupportthe
command.
�Afterthiscommandiscongured,whenitisattackedbysyn
ood,ifthetotalnumberofconnectionsexceedsthehighlimit
value,thedefendingbegins;ifthetotalnumberofconnections
islessthanthelowlimitvalue,itissafe;ifthevalueisbetween
thehighlimitandlowlimitvalues,therewillawarning.The
lowlimitvaluemustnotbelargerthanthehighlimitvalue.Use
thenoformofthiscommandtorestorethedefaultvalue.
ExampleThisexampledescribeshowtocongurethehigherthresholdto
68andthelowerthresholdto23.
ZXR10(config)#protect
ZXR10(config-protect)#tcpsynflood-protectone-minutehigh68low23
Related
Commands
tcpsynflood-protectmax-connect
tcpsynflood-protectdefence
showtcpsynflood-protectall
PurposeUsethiscommandtodisplayinformationaboutsynoodcongu-
rationandcurrentstatistics.
CommandModesPrivilegedEXECandshowcommand
Syntaxshowtcpsynflood-protectall
Instructions�Theplatformversion4.8.20andupgradeversionssupportthis
command.
�Thiscommandisusedtodisplayinformationaboutsynood
congurationandcurrentstatistics.
ExampleThisexampledescribeshowtodisplayinformationaboutsynood
congurationandcurrentstatistics.
ZXR10#showtcpsynflood-protectall
configurationinformation:
syn-flood-preventisenable
preventmeansisquickeningthetcpconnectagingand
deletingtheoldtcphal
fconnect
syn-waittimeis30(seconds)
old-half-connectis1
max-connecthighlimitis90%
max-connectlowlimitis60%
one-minutehighlimitis80%
one-minutelowlimitis50%
statisticsinformation:
98CondentialandProprietaryInformationofZTECORPORATION