How To Delete User-Defined Values; How To Disable A Specific Attack Detector; How To Disable All Non-Default Attack Detectors; How To Define The List Of Destination Ports For Tcp Or Udp Protocols For A Specific Attack Detector - Cisco SCE8000 Configuration Manual

Chapter 10 Identifying and Preventing Distributed-Denial-Of-Service Attacks

How to Define the List of Destination Ports for TCP or UDP Protocols for a Specific Attack Detector

Use the following command to define the list of destination ports for specific port detections for TCP or
UDP protocols.
Step 1 From the SCE(config if)# prompt, type attack-detector number TCP-port-list|UDP-port-list
(all|(port1
Defines the port list for the specified protocol and attack detector.

How to Delete User-Defined Values

Use the following command to remove settings of action, thresholds, subscriber notification, and
sending an SNMP trap for a specific attack detector and selected set of attack types.
Removing these settings for a given attack type restores them to the default 'not configured' state, which
means that the attack detector does not take part in determining the response for attacks of this attack
type.
Step 1 From the SCE(config if)# prompt, type default attack-detector number protocol (((TCP|UDP)
[dest-port (specific|not- specific|both)])|ICMP|other|all) attack-direction
(single-side-source|single-side-destination|single-side-both|dual-sided|all) side
(subscriber|network|both) and press Enter.
Defines the action of the specified attack detector.

How to Disable a Specific Attack Detector

Use the following command to disable a specific attack detector, configuring it to use the default action,
threshold values and subscriber notification for all protocols, attack directions and sides.
From the SCE(config if)# prompt, type default attack-detector number and press Enter.
Step 1
Disables the specified attack detector.

How to Disable All Non-default Attack Detectors

Use the following command to disable all non-default attack detectors, configuring them to use the
default values.
From the SCE(config if)# prompt, type default attack-detector all-numbered and press Enter.
Step 1
Disables all non-default attack detectors.
OL-16479-01
port2, port3... ]) and press Enter.
[,
Cisco SCE8000 Software Configuration Guide, Rel 3.1.6S
Configuring Attack Detectors
10-15