[Contents] [Prev] [Next] [Index] [Report an Error]

DoS Protection Group Configuration Example

Note: To configure a DoS protection group for an interface, you must configure the settings under the default group, which is the only group that is currently supported.

To configure a DoS protection group for an interface:



host1(config)#dos-protection-group default 

host1(config-dos-protection)#protocol AtmOam
rate 512 

host1(config-dos-protection)#protocol PppoeControl
rate 512 

host1(config-dos-protection)#protocol IpLocalOther
rate 512

To display the configuration:



host1#show dos-protection-group default

        default (canned-group: defaultCanned)  *modified -- no references
 
      Protocol       Dest Mod Rate  Burst Weight DropProb Priority  Skip
-------------------- ---- --- ----- ----- ------ -------- --------- ----
Ppp Echo Request     IC     -  2048  1024    100      100 HI green  Y
Ppp Echo Reply       IC     -  2048  1024    100      100 HI green  Y
Ppp Echo Reply Fastp FC     -     0     0    100      100 Data path Y
path
Ppp Control          IC     -  2048  1024    100      100 HI green  N
Atm Control (ILMI)   IC     -  2048  1024    100      100 HI green  Y
Atm OAM              IC     *   512   512    100      100 LO green  N
Atm Dynamic Interfac IC     -  1024   512    100      100 HI yellow N
e Column Creation
Atm Inverse ARP      IC     -   256   128    100      100 LO yellow N
Frame Relay Control  IC     -  2048  1024    100      100 HI green  Y
(LMI)
Frame Relay Inverse  IC     -   256   128    100      100 LO yellow N
Arp
Pppoe Control        IC     *   512   512    100      100 HI yellow N
Pppoe Ppp Config Dyn IC     -  1024   512    100      100 HI yellow N
amic Interface Colum
n Creation
Ethernet ARP Miss    IC     -   256   128    100      100 LO yellow N
Ethernet ARP         IC     -   256   128    100      100 LO yellow N

[Contents] [Prev] [Next] [Index] [Report an Error]