huawei-cpudefend

Device security.

Grouping Objects Abstract
acl-deny-group slot packet-info dropped-packets Statistics of attack packet in a specified slot.
alarm-drop-rate alarm-drop-rate Sets alarm parameters for the dropped packets before they are sent to the CPU.
attack-source-trace-packet pe-vlan-id ce-vlan-id layer-2-type source-mac destination-mac protocol-number protocol-type atm-vpi atm-vci layer-2dot5-type arp-type source-ip destination-ip mpls-lable-1 mpls-lable-2 mpls-lable-3 mpls-lable-4 mpls-lable-5 layer-3-type ip-version ip-header-length ip-type-of-service ip-total-length ip-identification ip-fragment-offset ip-ttl ip-protocol-number ip-checksum ipv6-traffic-class ipv6-flow-label ipv6-payload-length ipv6-next-header ipv6-hop-limit ipv6-source-address ipv6-destination-address layer-4-type source-port destination-port tcp-sequence-num tcp-acknowledgement-num tcp-flags tcp-win-size udp-length icmp-or-igmp-type icmp-or-igmp-code checksum igmp-group-address attack-trace-data Displays attack source trace packets.
cpcar-state cir cbs min-packet-length fixed-packet-length priority description Displays the cpcar information.
cpcar-statistics passed-packets dropped-packets acl-denied-packets configured-cir configured-cbs actual-cir actual-cbs priority min-packet-length fixed-packet-length last-drop-start-time last-drop-end-time last-drop-rate last-drop-packets peak-rate-time peak-rate Displays information about the attack defense.
cp-rate-limit-dot1q cir cbs prior Restricts the rate at which packets on the dot1q-termination interface are sent to the CPU.
cp-rate-limit-general cir cbs prior Restricts the rate at which packets on the general interface are sent to the CPU.
cp-rate-limit-qinq cir cbs prior Restricts the rate at which packets on the qinq-termination interface are sent to the CPU.
cp-rate-limit-statistics passed-bytes passed-byte-rate dropped-bytes dropped-byte-rate passed-packets passed-packet-rate dropped-packets dropped-packet-rate Displays statistics about all protocol or specific protocol attack packets on an interface.
devm-group cpudefend cpudefend-devm Applies an attack defense policy to the board.
host-car-statistics slot car-id passed-bytes dropped-bytes Statistics about packets controlled by HOST CAR.
http-vlan-host-car-statistics slot car-id passed-bytes dropped-bytes Statistics about packets controlled by HTTP HOST CAR and VLAN HOST CAR.
packet-statistics total-packets passed-packets dropped-packets Displays statistics about protocol packets.
protocol-group-state cir-configured cir-default weight-configured weight-default Displays the bandwidth and weight of the packets to be sent to the CPU in protocol groups.
session-car-statistics vs-id green-packets yellow-packets red-packets configured-cir configured-cbs configured-pir configured-pbs actual-cir actual-cbs actual-pir actual-pbs fixed-packet-length cir-configured-type cbs-configured-type pir-configured-type pbs-configured-type Displays whitelist session-CAR statistics.

© 2023 YumaWorks, Inc. All rights reserved.