firewall defend action

Function

The firewall defend action command configures the action to single-packet attack packets.

Format

firewall defend action { alert | discard }

Parameters

Parameter	Description	Value
alert	Generates an alarm, but does not discard the attack packet.	-
discard	Generates an alarm and discards the attack packet.	-

Views

System view

Default Level

2: Configuration level

Usage Guidelines

By default, a FW generates an alarm and discards single-packet attack packets upon receiving the attack packet.

The action configured using the firewall defend action command takes effect only on single-packet attacks. To configure the DDoS attack processing method, run the ddos-mode command.

Example

# Set the action to single-packet attack packets to discard.

<sysname> system-view
[sysname] firewall defend action discard