H3C S7500 Series Bedienungsanleitung

Operation Manual – Telnet Protection

H3C S7500 Series Ethernet Switches Table of Contents

Table of Contents

Chapter 1 Telnet Protection Configuration.................................................................................1-1

1.1 Introduction........................................................................................................................1-1

1.2 Telnet Protection Configuration.........................................................................................1-2

1.2.1 Configuring Telnet Protection..................................................................................1-2

1.2.2 Configuring SNMP Protection.................................................................................1-2

1.2.3 Configuring ICMP Protection...................................................................................1-2

1.2.4 Configuring Default-route Telnet Protection............................................................ 1-3

Operation Manual – Telnet Protection

H3C S7500 Series Ethernet Switches Chapter 1 Telnet Protection Configuration

1-1

Chapter 1 Telnet Protection Configuration

When configuring Telnet protection, go to these sections for information you are

interested in:

zIntroduction

zTelnet Protection Configuration

1.1 Introduction

The Telnet protection function is used to protect Telnet packets, SNMP packets, and

ICMP packets from the specific source IP addresses in the case of attacks against the

network or high CPU utilization.

Telnet protection comes in global Telnet protection, special ARP Telnet protection, and

default-route Telnet protection. Global Telnet protection is the highest in priority; then

comes special ARPTelnet protection and default-route Telnet protection is the lowest in

priority.

After you configure global Telnet protection, all the Layer-3 interfaces are protected.

You can also configure special ARP Telnet protection to protect specified Layer-3

interfaces. If the default route exists, you can enable special ARP Telnet protection on

the gateway of the network segment where the next hop of the default route resides

through enabling default-route Telnet protection. By default, default-route Telnet

protection is disabled.

Before configuring Telnet protection, you need to enable Telnet, SNMP, and ICMP

protection respectively. You can configure Telnet protection, SNMP protection, and

ICMP protection for only the packets of the specific source IP addresses.

Caution:

After the network address translation (NAT) function is enabled,

zYou cannot configure global Telnet protection.

zYou cannot configure special ARP Telnet protection for the Layer-3 interface where

NAT resides.

zYou cannot configure default-route Telnet protection.

Operation Manual – Telnet Protection

H3C S7500 Series Ethernet Switches Chapter 1 Telnet Protection Configuration

1-2

1.2 Telnet Protection Configuration

1.2.1 Configuring Telnet Protection

Follow these steps to configure Telnet protection:

To do... Use the command... Remarks

Enter system view system-view —

Enable Telnet

protection

attack-protection telnet

[ ip-address ]

Required

If you use this command with the

ip-address parameter, you can

protect the packets that match

this source IP address only.

Enable global

Telnet protection

or special ARP

Telnet protection

attack-protection

[ ip-address ]

Required

If you use this command with the

ip-address parameter, you can

protect the specified Layer-3

interfaces.

1.2.2 Configuring SNMP Protection

Follow these steps to configure SNMP protection:

To do... Use the command... Remarks

Enter system view system-view —

Enable SNMP

protection

attack-protection

snmp [ ip-address ]

Required

If you use this command with the

ip-address parameter, you can

protect the packets that match this

source IP address only.

Enable global Telnet

protection or special

ARP Telnet

protection

attack-protection

[ ip-address ]

Required

If you use this command with the

ip-address parameter, you can

protect the specified Layer-3

interfaces.

1.2.3 Configuring ICMP Protection

Follow these steps to configure ICMP protection:

Operation Manual – Telnet Protection

H3C S7500 Series Ethernet Switches Chapter 1 Telnet Protection Configuration

1-3

To do... Use the command... Remarks

Enter system view system-view —

Enable ICMP

protection

attack-protection

icmp [ ip-address ]

Required

If you use this command with the

ip-address parameter, you can

protect the packets that match

this source IP address only.

Enable global Telnet

protection or special

ARP Telnet

protection

attack-protection

[ ip-address ]

Required

If you use this command with the

ip-address parameter, you can

protect the specified Layer-3

interfaces.

1.2.4 Configuring Default-route Telnet Protection

Follow these steps to configure default-route Telnet protection:

To do... Use the command... Remarks

Enter system view system-view —

Enable default-route

Telnet protection

undo attack-protection

disable-defaultroute

Required

By default, default-route

Telnet protection is

disabled.

Andere Handbücher für S7500 Series

Andere H3C Schalten Handbücher

H3C

H3C S10500 Series Bedienungsanleitung

H3C

H3C FS5300-EI Series Bedienungsanleitung

H3C

H3C S10500 Series Bedienungsanleitung

H3C

H3C H3C S3600 Series Bedienungsanleitung

H3C

H3C H3C S7500E-X Bedienungsanleitung

H3C

H3C S5500-SI Series Bedienungsanleitung

H3C

H3C S12500X-AF Series Bedienungsanleitung

H3C

H3C S9820-8C Bedienungsanleitung

H3C

H3C H3C S5100-SI Bedienungsanleitung

H3C

H3C S7500X-G Series Bedienungsanleitung

H3C

H3C S9820-64H Bedienungsanleitung

H3C

H3C S5560X-EI Series Bedienungsanleitung

H3C

H3C S12500X-2L Bedienungsanleitung

H3C

H3C S6800 Series Bedienungsanleitung

H3C

H3C S3100V2-52TP Bedienungs- und Wartungshandbuch

H3C

H3C H3C S7500E Series Bedienungsanleitung

H3C

H3C S9500 Series Bedienungsanleitung

H3C

H3C S5120-EI Series Bedienungsanleitung

H3C

H3C S3100 Series Bedienungsanleitung

H3C

H3C S7500 Series Bedienungsanleitung

H3C

H3C S5120-SI Series Bedienungsanleitung

H3C

H3C S9500 Series Bedienungsanleitung

H3C

H3C S3610- 28P Bedienungsanleitung

H3C

H3C S3100 Series Bedienungsanleitung

Beliebte Schalten Handbücher anderer Marken

URC

URC Total Control MFS-8 Bedienungsanleitung

Azbil

Azbil HPQ-D11 Bedienungsanleitung

Sony

Sony DFS-900M Bedienungsanleitung

SICK

SICK i17S Bedienungsanleitung

F&F

F&F SZR-277 Bedienungsanleitung

Shure

Shure UAMS/BK Bedienungsanleitung

Dräger

Dräger X-zone Switch Off Bedienungsanleitung

Asco

Asco Joucomatic 349 Series Bedienungsanleitung

BT Mini Hub Bedienungsanleitung

D-Link

D-Link DES-1226G Bedienungsanleitung

Johnson Controls

Johnson Controls FS80-C Bedienungsanleitung

Alcatel-Lucent

Alcatel-Lucent 7450 ESS-12 Bedienungsanleitung

MicroNet

MicroNet SP1200A Bedienungsanleitung

Ruijie

Ruijie RG-PF2920 Series Installations- und Betriebsanleitung

Altinex

Altinex DA1914SX Bedienungsanleitung

MiLAN

MiLAN MIL-SM2401M Bedienungsanleitung

RJM

RJM MASTERMIND PBC/6X Bedienungsanleitung

Atlas

Atlas MMK-KVM8 Bedienungsanleitung