anti-ddos np-rule drop sample-rate

Function

The anti-ddos np-rule drop sample-rate command specifies the sampling ratio of first packets discarded by the hardware chip.

The undo anti-ddos np-rule drop sample-rate command restores the default sampling ratio.

Format

anti-ddos np-rule drop sample-rate sample-rate-value

undo anti-ddos np-rule drop sample-rate

Parameters

Parameter	Description	Value
sample-rate-value	Specifies the sampling ratio of first packets discarded by the hardware chip.	The value is an integer ranging from 0 to 15. The default value is 7.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Only the USG6610E/6620E, USG6630E/6650E, USG6635E/6655E support this command.

For USG6680E and USG6712E/6716E:

In versions earlier than V600R007C20SPC200, device support this command.
V600R007C20SPC200 and later versions, device batches are distinguished by BomID Version (which can be checked using the display version command), whose BomID Version is earlier than 003 and whose device BOM numbers does not contain "-001" support this command.

If sample-rate indicating the sampling coefficient is configured, the sampling ratio is 2^sample-rate:1, which means one out of every 2^sample-rate packets is sampled. For example, if sample-rate is set to 2, the sampling ratio is 4:1, which means one out of every four packets is sampled.

Example

# Set the sampling ratio of first packets discarded by the hardware chip to 2⁶:1.

<sysname> system-view
[sysname] anti-ddos np-rule drop sample-rate 6