Cisco SCE8000 Specifications Page 73

  • Download
  • Add to my manuals
  • Print
  • Page
    / 778
  • Table of contents
  • BOOKMARKS
  • Rated. / 5. Based on customer reviews
Page view 72
2-33
Cisco SCE 8000 CLI Command Reference
Chapter 2 CLI Command Reference
attack-filter dont-filter | force-filter
Command Default None
Command Modes Interface Linecard Configuration
Command History This table includes the following release-specific history entries:
Usage Guidelines After configuring the attack detectors, the Cisco SCE platform automatically detects attacks and handles
them according to the configuration. However, to manually intervene (either for debugging purposes or
because reconfiguring the Cisco SCE attack detectors properly would be difficult), you can use the CLI
attack- filtering commands to:
Prevent or stop filtering of an attack related to a protocol, direction, and specified IP address
Force filtering of an attack related to a protocol, direction, and specified IP address
Attack filtering can be prevented for a specified IP address or protocol by executing a dont-filter CLI
command. If filtering is already in process, it will be stopped. When attack filtering has been stopped, it
remains stopped until explicitly restored by another CLI command (either force-filter or no dont-filter).
Authorization: admin
Examples The following example shows how to prevent attack filtering for the specified conditions:
SCE8000>enable 10
Password:<cisco>
SCE8000#config
SCE8000(config)#interface linecard 0
SCE8000(config if)#attack-filter dont-filter protocol other attack-direction
single-side-source ip 10.10.10.10 side both
SCE8000(config if)#
The following example shows how to restore all attack filtering:
SCE8000>enable 10
SCE8000#config
SCE8000(config)#interface linecard 0
SCE8000(config if)#no attack-filter dont-filter all
SCE8000(config if)#
Password:<cisco>
ip-address IP address from which traffic will not be filtered:
For single-sided filtering, specify only one IP address.
For dual-sided filtering, specify both a source IP address and a
destination IP address.
side For side, choose subscriber, network, or both.
all Restores or stops all filtering.
Release Modification
3.1.0 This command was introduced.
Page view 72
1 2 ... 68 69 70 71 72 73 74 75 76 77 78 ... 777 778

Comments to this Manuals

No comments