by-protocol (IDS Screen Next Gen Services)
Syntax
by-protocol {
icmp {
maximum-sessions number;
packet-rate number;
session-rate number;
}
tcp {
maximum-sessions number;
packet-rate number;
session-rate number;
}
udp {
maximum-sessions number;
packet-rate number;
session-rate number;
}
}
Hierarchy Level
[edit services screen ids-option screen-name limit-session by-destination], [edit services screen ids-option screen-name limit-session by-source]
Description
Configure session limits for individual destination or source addresses, or for individual destination or source subnets, for the specified protocol. This protects against network probing attacks and network flooding attacks. When a session limit is exceeded for a source or destination for the protocol, packets from the source or to the destination are dropped until the session limit is no longer exceeded.
To specify limits for destination or source subnets rather than
individual addresses, include the aggregations statement
at the [edit services screen ids-option screen-name] hierarchy level.
Options
| icmp | Apply session limits to ICMP packets.
|
||||||
| tcp | Apply session limits to TCP packets.
|
||||||
| udp | Apply session limits to UDP packets.
|
Required Privilege Level
interface—To view this statement in the configuration.
interface-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 19.3R2.