LevelOne GEL-2060 Kurzanleitung
GEL-2060
Anti-Attack Configuration Commands
Table of Contents
http://www.level1.com -- I -
Table of Contents
Chapter 1 Anti-Attack Configuration Commands.................................................................................................................. 1
1.1 Anti-Attack Configuration Commands.................................................................................................................... 1
1.1.1 filter period time......................................................................................................................................... 1
1.1.2 filter threshold value .................................................................................................................................. 1
1.1.3 filter block-time value ................................................................................................................................ 2
1.1.4 filter igmp................................................................................................................................................... 3
1.1.5 filter arp ..................................................................................................................................................... 3
1.1.6 filter enable................................................................................................................................................ 3
1.1.7 show filter .................................................................................................................................................. 4
Anti-Attack Configuration Commands
http://www.level1.com -- 1 -
Chapter 1 Anti-Attack Configuration Commands
1.1 Anti-Attack Configuration Commands
1.1.1 filter period time
To configure filter period for attack, use the filter period command.
parameter
parameter
Description
time
The filter period for attack in seconds. It is considered as attack when the
attack source sends packets above the specified number in any filter
period time.
default
10 seconds
Command mode
Global configuration mode
example
Switch_config#filter period 15
Related commands
filter threshold value
1.1.2 filter threshold value
To configure the filter threshold value, use the filter thresholf value command.
parameter
parameter
Description
value
It is considered as attack when the receiving packets excddes the filter
threshold value.
Anti-Attack Configuration Commands
http://www.level1.com -- 2 -
default
1000
command mode
global configuration mode
example
Switch_config#filter threshold 1500
Related commands
filter period time
1.1.3 filter block-time value
To configure the time to block attack resource, use the filter block-time value
command.
parameter
parameter
description
Value
Time to block attack source in seconds.
default
300 seconds
command mode
global configuration mode
example
Switch_config#filter block-time 600
Related commands
filter period time
filter threshold value
Anti-Attack Configuration Commands
http://www.level1.com -- 3 -
1.1.4 filter igmp
To filter IGMP attack, use the filter igmp command.
parameter
none
Command mode
Global configuration mode
example
Switch_config#filter igmp
Related commands
filter enable
1.1.5 filter arp
To fliter ARP attack, use the filter arp command.
parameter
none
Command mode
physical interface configuration mode
example
Switch_config_f0/1#filter arp
Related commands
filter enable
1.1.6 filter enable
To enable filter feature, use the filter enable command.
Anti-Attack Configuration Commands
http://www.level1.com -- 4 -
parameter
none
Command mode
Global configuration mode
example
Switch_config#filter enable
Related commands
filter igmp
filter arp
1.1.7 show filter
To display working state of the anti-attack feature of the current switch, use the show
filter command.
parameter
none
command mode
non-user mode
Switch#show fil
Filter threshold: 1000 packet in any 10 seconds
Filters blocked:
Address seconds source interface
00a0.0c13.647d 27.0 FastEthernet1/2
Filters counting:
Address seconds count source interface
00a0.0c43.647d 1.84 371 FastEthernet1/2
Filters blocked: indicates MAC address of the blocked attack source, blocked time and
source interface.
Filters counting: indicates MAC address of the attack source, counting time, the
number of the receiving packets and the source interface.
Andere Handbücher für GEL-2060
5
Inhaltsverzeichnis
Andere LevelOne Schalten Handbücher
LevelOne
LevelOne GTL-2661 Bedienungsanleitung
LevelOne
LevelOne GSW-1676 Bedienungsanleitung
LevelOne
LevelOne ProCon GSW-2693 Bedienungsanleitung
LevelOne
LevelOne GEP-2841 Bedienungsanleitung
LevelOne
LevelOne FSW-1650 Bedienungsanleitung
LevelOne
LevelOne FEP-0931 Bedienungsanleitung
LevelOne
LevelOne FGP-2472 Bedienungsanleitung
LevelOne
LevelOne GSW-1657 Bedienungsanleitung
LevelOne
LevelOne IGP-1271 Bedienungsanleitung
LevelOne
LevelOne OfficeCon GSW-2440 Bedienungsanleitung
LevelOne
LevelOne FEU-0511 Bedienungsanleitung
LevelOne
LevelOne ViewCon KVM-0407 Bedienungsanleitung
LevelOne
LevelOne GSW-0508 Bedienungsanleitung
LevelOne
LevelOne FGP-1000 Bedienungsanleitung
LevelOne
LevelOne GEL-2460 Bedienungsanleitung
LevelOne
LevelOne KVM-0830 Bedienungsanleitung
LevelOne
LevelOne FEP-0631 Bedienungsanleitung
LevelOne
LevelOne KVM-0261 Bedienungsanleitung
LevelOne
LevelOne GEU-0822 Bedienungsanleitung
LevelOne
LevelOne GEL-2870 Bedienungsanleitung
