config firewall DoS-policy

Configure IPv4 DoS policies.

config firewall DoS-policy

Description: Configure IPv4 DoS policies.

edit <policyid>

set status [enable|disable]

set comments {var-string}

set interface {string}

set srcaddr <name1>, <name2>, ...

set dstaddr <name1>, <name2>, ...

set service <name1>, <name2>, ...

config anomaly

Description: Anomaly name.

edit <name>

set status [disable|enable]

set log [enable|disable]

set action [pass|block]

set quarantine [none|attacker]

set quarantine-expiry {user}

set quarantine-log [disable|enable]

set threshold {integer}

set threshold(default) {integer}

next

end

next

end

config firewall DoS-policy

Parameter	Description	Type	Size
status	Enable/disable this policy.	option	-
	Option Description enable Enable this policy. disable Disable this policy.
comments	Comment.	var-string	Not Specified
interface	Incoming interface name from available interfaces.	string	Not Specified
srcaddr <name>	Source address name from available addresses. Service name.	string	Maximum length: 79
dstaddr <name>	Destination address name from available addresses. Address name.	string	Maximum length: 79
service <name>	Service object from available options. Service name.	string	Maximum length: 79

config anomaly

Parameter	Description	Type	Size
status	Enable/disable this anomaly.	option	-
	Option Description disable Disable this status. enable Enable this status.
log	Enable/disable anomaly logging.	option	-
	Option Description enable Enable anomaly logging. disable Disable anomaly logging.
action	Action taken when the threshold is reached.	option	-
	Option Description pass Allow traffic but record a log message if logging is enabled. block Block traffic if this anomaly is found.
quarantine	Quarantine method.	option	-
	Option Description none Quarantine is disabled. attacker Block all traffic sent from attacker's IP address. The attacker's IP address is also added to the banned user list. The target's address is not affected.
quarantine-expiry	Duration of quarantine. . Requires quarantine set to attacker.	user	Not Specified
quarantine-log	Enable/disable quarantine logging.	option	-
	Option Description disable Disable quarantine logging. enable Enable quarantine logging.
threshold	Anomaly threshold. Number of detected instances per minute that triggers the anomaly action.	integer	Minimum value: 1 Maximum value: 2147483647
threshold(default)	Number of detected instances per minute which triggers action . Note that each anomaly has a different threshold value assigned to it.	integer	Minimum value: 0 Maximum value: 4294967295