You configure DoS profiles at the security-policy dos-profile level.
To create a DoS profile, use the following command:
Admin@nodename# create security-policy dos-profile <parameter>
Available parameters:
Parameter |
Description |
---|---|
name |
Set profile name. |
description |
Set profile description. |
aggregate |
Aggregate the number of packets transmitted per second for all IP addresses or count them individually for each IP address. |
syn |
Protect against network flooding for TCP protocol.
|
udp |
Protect against network flooding for UDP protocol.
|
icmp |
Protect against network flooding for ICMP protocol.
|
max-sessions |
Set a limit for the number of sessions:
|
To edit an existing DoS profile, use the following command:
Admin@nodename# set security-policy dos-profile <profile-name> <parameter>
The parameters available to update are the same as those used to create a new DoS profile.
To delete a profile, use the following command:
Admin@nodename# delete security-policy dos-profile <profile-name>
To display information about a DoS profile, use the following command:
Admin@nodename# show security-policy dos-profile <profile-name>