flood (ICMP)

Syntax

flood {threshold number ;}

Hierarchy Level

[edit security screen ids-option screen-name icmp]

Release Information

Statement modified in Release 9.2 of Junos OS.

Description

Configure the device to detect and prevent Internet Control Message Protocol (ICMP) floods. An ICMP flood occurs when ICMP echo requests are broadcast with the purpose of flooding a system with so much data that it first slows down, and then times out and is disconnected. The threshold defines the number of ICMP packets per second allowed to ping the same destination address before the device rejects further ICMP packets.

Options

threshold number —Number of ICMP packets per second allowed to ping the same destination address before the device rejects further ICMP packets.

Range: 1 through 100000 per second

Default: 1000 per second

Note: For SRX Series devices the applicable range is 1 through 4000000 per second.

Usage Guidelines

For configuration instructions and examples, see the Junos OS Security Configuration Guide.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.