bandwidth (DDoS)
Syntax
bandwidth packets-per-second;
Hierarchy Level
For MX Series routers and EX9200 switches:
[edit system ddos-protection protocols protocol-group (aggregate | packet-type)]
For ACX Series routers, PTX Series routers and QFX Series switches:
[edit system ddos-protection protocols (DDoS) protocol-group (aggregate | packet-type)]
For UFISPACE-S9600-72XC and UFISPACE-S9600-102XC routers:
[edit system ddos-protection protocols (DDoS) exceptions mtu-exceeded]
Description
Configure the DDoS bandwidth rate limit; that is, the maximum traffic rate (packets per second) allowed by the specified policer. When the value is exceeded, a violation is declared.
(UFISPACE-S9600-72XC and UFISPACE-S9600-102XC) Configure the DDoS bandwidth rate limit (in packets per second) for traffic that exceeds the maximum transmission unit (MTU) size of an interface. The packet size is 512 bytes.
Options
packets-per-second—Number of packets
per second that are allowed by the aggregate or packet-type policer.
Range: 1 through 100,000 packets per second
Default: The default bandwidth value varies by packet type or protocol. You can view the default values for all packet types or protocols before you begin control plane DDoS protection configuration by entering the
show ddos-protection protocols parameters briefcommand from operational mode. For ACX Series routers, PTX Series routers and QFX Series switches, the default bandwidth limits are also provided in protocols (DDoS) (ACX Series, PTX Series, and QFX Series).
Required Privilege Level
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 11.2.