Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    suspicious-control-flow-detection protocol low-threshold

    Syntax

    suspicious-control-flow-detection protocol protocolValue
    low-threshold lowThresholdValue

    no suspicious-control-flow-detection protocol protocolValue low-threshold

    Release Information

    Command introduced in JunosE Release 7.3.0.

    Description

    Sets the low threshold rate at which a suspicious flow becomes no longer suspicious for a specific protocol. The no version restores the default for a protocol, which is a protocol-dependent non-zero numeric value.

    Options

    • protocolValue—Name of the protocol. For details about the values that are displayed for this attribute in the CLI interface, see the Protocol Mapping section in Understanding DoS Protection. The following names of protocols apply to the protocolValue variable that is available with this command, in addition to the list of protocol names that are described in the Protocol Mapping section.
      • EthernetFcBasedPppTerminate—Ethernet forwarding controller-based PPP Fast Reconnect
      • EthernetOam—Ethernet OAM packet
      • IpFastBfd—IP fast BFD
      • IpLocalFastBfd—IP local fast BFD
      • IpRouteNull0Interface—IP route to null 0 interface
    • lowThresholdValue—Threshold value in packets per second; 0 or a number in the range 1–32767; a value of zero means that a suspicious flow cannot change to the nonsuspicious state via a threshold; a flow can only become nonsuspicious via a backoff time; if the low threshold value is zero and the backoff time is zero, the flow can only be considered nonsuspicious if the rate (in packets per second) goes to zero

    Mode

    Global Configuration

    Published: 2014-08-18