limit (Security SCTP)
Syntax
limit {
address name {
payload-protocol (asap | bicc | ddp-segment | ddp-stream | diameter-dtls | diameter-sctp | dua | enrp | h248 | h323 | id | iua | m2pa | m2ua | m3ua | others | qipc | reserved | s1ap | simco | sua | tali | v5ua | x2ap) {
rate rate;
}
}
payload-protocol (asap | bicc | ddp-segment | ddp-stream | diameter-dtls | diameter-sctp | dua | enrp | h248 | h323 | id | iua | m2pa | m2ua | m3ua | others | qipc | reserved | s1ap | simco | sua | tali | v5ua | x2ap) {
rate rate;
}
rate {
address name {
sccp sccp;
ssp ssp;
sst sst;
}
sccp sccp;
ssp ssp;
sst sst;
}
}
Hierarchy Level
[edit security sctp profile profile-name]
Description
Use the limit option to set the rate limit per association for local Services Processing Unit (SPU) packets. You can configure a GPRS SCTP profile by setting the limit rate parameter and the payload protocol parameter for SCTP inspection.
From Junos OS Release 20.4R1 onwards, the [edit security gprs sctp profile
profile-name] hierarchy level is replaced by
[edit security sctp profile
profile-name].
Options
| address ip-address | To set Signalling Connection Control Part (SCCP), Subsystem-Prohibited (SSP), and Subsystem Status Test (SST) messages rate limit to an IP address. The IP address can accept either an IPv4 address or an IPv6 address. |
| sccp rate-limit | To set the SCCP messages rate limit. |
| ssp rate-limit | To set the SSP messages rate limit. |
| sst rate-limit | To set the SSP messages rate limit. |
The remaining statements are explained separately. See CLI Explorer.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 10.2. Statement is modified in Junos OS Release 12.1X46-D10. Support for address option accepting both IPv4 and IPv6 formats added in Junos OS Release 12.1X47-D10.