[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

Enabling ICMP Flood Protection

An ICMP flood typically occurs when ICMP echo requests overload its victim with so many requests that it expends all its resources responding until it can no longer process valid network traffic.

Before You Begin

For background information, read Understanding ICMP Flood Attacks.

To enable ICMP flood protection, use the JUNOS CLI configuration editor. The specified zone is where a flood might originate:

Note: The value unit is ICMP packets per second. The default value is 1000 packets per second.

user@host# set security screen 1000-icmp-flood icmp flood threshold 1000
user@host# set security zones security-zone zone screen 1000-icmp-flood

[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]