< Home

anti-ddos auto-defend traffic-policy enable

Function

The anti-ddos auto-defend traffic-policy enable command enables dynamic traffic limiting for traffic attack defense.

The undo anti-ddos auto-defend traffic-policy enable command disables dynamic traffic limiting for traffic attack defense.

Format

anti-ddos auto-defend traffic-policy enable

undo anti-ddos auto-defend traffic-policy enable

Parameters

None

Views

System view

Default Level

3: Management level

Usage Guidelines

By default, dynamic traffic limiting for traffic attack defense is disabled.

Traffic attacks may cause a large volume of traffic to be sent to the MPU CPU for processing, which overloads the MPU CPU and affects services.

Attack traffic is checked on the hardware chip. If the session packet rate or traffic rate reaches the specified threshold, a traffic limiting rule is delivered to the hardware chip. Then traffic limiting is performed on the attack traffic on the hardware chip, reducing the MPU CPU usage.

Example

# Enable dynamic traffic limiting for traffic attack defense.
<sysname> system-view
[sysname] anti-ddos auto-defend traffic-policy enable
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >