config firewall DoS-policy

Configure IPv4 DoS policies.

config firewall DoS-policy

Description: Configure IPv4 DoS policies.

edit <policyid>

set status [enable|disable]

set name {string}

set comments {var-string}

set interface {string}

set srcaddr <name1>, <name2>, ...

set dstaddr <name1>, <name2>, ...

set service <name1>, <name2>, ...

config anomaly

Description: Anomaly name.

edit <name>

set status [disable|enable]

set log [enable|disable]

set action [pass|block]

set quarantine [none|attacker]

set quarantine-expiry {user}

set quarantine-log [disable|enable]

set threshold {integer}

set threshold(default) {integer}

next

end

next

end

config firewall DoS-policy

Parameter	Description	Type	Size	Default
status	Enable/disable this policy.	option	-	enable
	Option Description enable Enable this policy. disable Disable this policy.
name	Policy name.	string	Maximum length: 35
comments	Comment.	var-string	Maximum length: 1023
interface	Incoming interface name from available interfaces.	string	Maximum length: 35
srcaddr <name>	Source address name from available addresses. Address name.	string	Maximum length: 79
dstaddr <name>	Destination address name from available addresses. Address name.	string	Maximum length: 79
service <name>	Service object from available options. Service name.	string	Maximum length: 79

config anomaly

Parameter	Description	Type	Size	Default
status	Enable/disable this anomaly.	option	-	disable
	Option Description disable Disable this status. enable Enable this status.
log	Enable/disable anomaly logging.	option	-	disable
	Option Description enable Enable anomaly logging. disable Disable anomaly logging.
action	Action taken when the threshold is reached.	option	-	pass
	Option Description pass Allow traffic but record a log message if logging is enabled. block Block traffic if this anomaly is found.
quarantine	Quarantine method.	option	-	none
	Option Description none Quarantine is disabled. attacker Block all traffic sent from attacker's IP address. The attacker's IP address is also added to the banned user list. The target's address is not affected.
quarantine-expiry	Duration of quarantine. . Requires quarantine set to attacker.	user	Not Specified	5m
quarantine-log	Enable/disable quarantine logging.	option	-	enable
	Option Description disable Disable quarantine logging. enable Enable quarantine logging.
threshold	Anomaly threshold. Number of detected instances (packets per second or concurrent session number) that triggers the anomaly action.	integer	Minimum value: 1 Maximum value: 2147483647	0
threshold(default)	Number of detected instances per minute which triggers action . Note that each anomaly has a different threshold value assigned to it.	integer	Minimum value: 0 Maximum value: 4294967295	0