Understanding the Discard Interface

The discard (dsc) interface is not a physical interface, but a virtual interface that discards packets. You can configure one discard interface. This interface allows you to identify the ingress (inbound) point of a denial-of-service (DoS) attack. When your network is under attack, the target host IP address is identified, and the local policy forwards attacking packets to the discard interface. Traffic routed out the discard interface is silently discarded.

Related Topics

• Junos OS Feature Support Reference for SRX Series and J Series Devices
• Understanding Interfaces
• Discard Interfaces Overview in the Junos Network Interfaces Configuration Guide
• Example: Discard Interface in the Junos Network Interfaces Configuration Guide
• Forwarding Packets to the Discard Interface in the Junos Network Interfaces Configuration Guide
• show interfaces (Discard) in the Junos Interfaces Command Reference
• Understanding Management Interfaces
• Understanding the Loopback Interface