source-threshold

Syntax

Hierarchy Level

Release Information

Statement modified in Release 9.2 of Junos OS.

Description

Specify the number of SYN segments that the device can receive per second from a single source IP address (regardless of the destination IP address and port number) before the device begins dropping connection requests from that source.

Options

number —Number of SYN segments to be received per second before the device starts dropping connection requests.

Range: 4 through 100000 per second

Default: 1024 per second

Note: For SRX Series devices the applicable range is 4 through 1000000 per second.

Usage Guidelines

For configuration instructions and examples, see the Junos OS Security Configuration Guide.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.