Syntax
attack-protection telnet [ ip-address ]
undo attack-protection
telnet
View
System view
Parameter
ip-address:
Configures to protect Telnet packets for the specified source IP address.
Description
Use the attack-protection telnet
command to enable Telnet protection.
Use the undo attack-protection
telnet command to disable Telnet protection.
Before enabling Telnet protection, you need
to enable Telnet protection, and then configure global Telnet protection,
special ARP Telnet protection, and default-route Telnet protection.
By default, Telnet protection is disabled.
Example
# Protect Telnet packets addressed from the
source IP address 192.168.0.100.
<H3C> system-view
System View: return to User View with
Ctrl+Z.
[H3C] attack-protection telnet 192.168.0.100
Syntax
attack-protection snmp [ ip-address ]
undo attack-protection
snmp
View
System view
Parameter
ip-address:
Configures to protect SNMP packets for the specified source IP address.
Description
Use the attack-protection snmp
command to enable SNMP protection.
Use the attack-protection snmp
command to disable SNMP protection.
Before enabling SNMP protection, you need
to enable SNMP protection, and then configure global Telnet protection, special
ARP Telnet protection, and default-route Telnet protection.
By default, SNMP protection is disabled.
Example
# Protect SNMP packets addressed from the
source IP address 192.168.0.100.
<H3C> system-view
System View: return to User View with
Ctrl+Z.
[H3C] attack-protection snmp
192.168.0.100
Syntax
attack-protection icmp [ ip-address ]
undo attack-protection icmp
View
System view
Parameter
ip-address:
Configures to protect ICMP packets for the specified source IP address.
Description
Use the attack-protection icmp
command to enable ICMP protection.
Use the undo attack-protection
icmp command to disable ICMP protection.
Before enabling ICMP protection, you need
to enable ICMP protection, and then configure global Telnet protection, special
ARP Telnet protection, and default-route Telnet protection.
By default, ICMP protection is disabled.
Example
# Protect ICMP packets addressed from the
source IP address 192.168.0.100.
<H3C> system-view
System View: return to User View with
Ctrl+Z.
[H3C] attack-protection icmp
192.168.0.100
Syntax
attack-protection [ ip-address ]
undo attack-protection
View
System view
Parameter
ip-address:
Sets special ARP Telnet protection for the specified Layer-3 interface.
Description
Use the attack-protection command to
set global Telnet protection. After you execute this command, the system
protects all the Layer-3 interfaces in the Up state.
Use the undo attack-protection
command to cancel the global Telnet protection.
Use the attack-protection ip-address
command to set special ARP Telnet protection. If the Layer-3 interface
corresponding to the specified IP address is in the Up state, Telnet protection
is enabled on this Layer-3 interface. If the corresponding Layer-3 interface
does not exist or is in the Down state, the system saves this configuration as
the special ARP settings and enables Telnet protection when the corresponding
Layer-3 interface is in the UP state.
Use the undo attack-protection ip-address
command to cancel the special ARP Telnet protection.
Example
# Configure global Telnet protection.
<H3C> system-view
System View: return to User View with
Ctrl+Z.
[H3C] attack-protection
# Configure special ARP Telnet protection.
<H3C> system-view
System View: return to User View with
Ctrl+Z.
[H3C] attack-protection 192.168.0.1
Syntax
attack-protection disable-defaultroute
undo attack-protection
disable-defaultroute
View
System view
Parameter
None
Description
Use the attack-protection
disable-defaultroute command to disable the default-route Telnet protection
function.
Use the undo attack-protection
disable-defaultroute command to enable the default-route Telnet protection
function.
By default, default-route Telnet protection
is disabled.
After enabling the NAT function, you cannot
configure default-route Telnet protection.
Example
# Enable
default-route Telnet protection.
<H3C> system-view
System View: return to User View with
Ctrl+Z.
[H3C] undo attack-protection
disable-defaultroute
