anti-ddos np-rule pass sample-rate

Function

The anti-ddos np-rule pass sample-rate command configures the sampling ratio of the packets permitted by the hardware-based defense function.

The undo anti-ddos np-rule pass sample-rate command restores the default sampling ratio.

Format

anti-ddos np-rule pass sample-rate sample-rate-value

undo anti-ddos np-rule pass sample-rate

Parameters

Parameter	Description	Value
sample-rate-value	Specifies the sampling ratio of the packets permitted by the hardware-based defense function.	The value is an integer ranging from 0 to 15. The default value is 7.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Only the USG6610E/6620E, USG6630E/6650E, USG6635E/6655E support this command.

For USG6680E and USG6712E/6716E:

In versions earlier than V600R007C20SPC200, device support this command.
V600R007C20SPC200 and later versions, device batches are distinguished by BomID Version (which can be checked using the display version command), whose BomID Version is earlier than 003 and whose device BOM numbers does not contain "-001" support this command.

If the sampling coefficient is the value of sample-rate, the sampling ratio is 2^sample-rate:1, which means one out of every 2^sample-rate packets is sampled. For example, if sample-rate is set to 2, the sampling ratio is 4:1, which means one out of every four packets is sampled.

Example

# Set the sampling ratio of the packets permitted by the hardware-based defense function to 2⁶:1.

<sysname> system-view
 [sysname] anti-ddos np-rule pass sample-rate 6