flow-detection (DDoS Packet Level)
Syntax
flow-detection {
flow-detect-time detect-period;
no-flow-logging;
timeout-active-flows enable-period;
flow-level-bandwidth {
logical-interface flow-bandwidth;
physical-interface flow-bandwidth;
subscriber flow-bandwidth;
}
flow-level-control {
logical-interface flow-control-mode;
physical-interface flow-control-mode;
subscriber flow-control-mode;
}
flow-level-detection {
logical-interface operation-mode;
physical-interface operation-mode;
subscriber operation-mode;
}
flow-detection-mode (automatic |off | on);
flow-recover-time recover-period;
flow-timeout-time timeout-period;
}
Hierarchy Level
[edit system ddos-protection protocols protocol-group packet-type ]
Description
(MX Series routers with only MPCs, T4000 Core Routers with only FPC5s, or EX9200 switches) Configure control plane DDoS protection suspicious control flow detection for a packet type.
The remaining statements are explained separately. See CLI Explorer.
Required Privilege Level
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 12.3.