anti-ddos udp-frag-flood dynamic-fingerprint-learn

Function

The anti-ddos udp-frag-flood dynamic-fingerprint-learn command enables the global UDP fragment flood attack defense.

The undo anti-ddos udp-frag-flood dynamic-fingerprint-learn command disables the global UDP fragment flood attack defense.

Format

anti-ddos udp-frag-flood dynamic-fingerprint-learn [ alert-speed alert-speed ]

undo anti-ddos udp-frag-flood dynamic-fingerprint-learn

Parameters

Parameter	Description	Value
alert-speed alert-speed	Specifies the threshold of the UDP fragment rate that triggers UDP fragment flood attack defense.	The value is an integer ranging from 1 to 10240, in Mbit/s. The default value is 50.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

By default, the function is disabled.

A FW uses the dynamic fingerprint learning function to defend against UDP fragment flood attacks.

Example

# Enable the global UDP fragment flood attack defense. Set the threshold of the UDP fragment rate that triggers UDP fragment flood attack defense to 100 Mbit/s.

<sysname> system-view
[sysname] anti-ddos udp-frag-flood dynamic-fingerprint-learn alert-speed 100