Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

alarm-without-drop (IDS Screen Next Gen Services)

Syntax

Hierarchy Level

Description

Use the ids-option to prevent DDoS attack from interface. Configure the IDS screen to log an alarm for an offending packet, but not drop the packet. The screen skips the rest of the screen checks. The packet is not counted as a dropped packet.

IDS screen logs an alarm when packets exceed the session limit. To prevent packet drops, configure alarm-without-drop.

Options

alarm-without-drop Do not drop packet, only generate alarm

Required Privilege Level

interface—To view this statement in the configuration.

interface-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 19.3R2.