Virus Throttling (5300xl Switches Only)
Basic Connection-Rate Filtering Configuration
Listing and Unblocking the Currently-Blocked Hosts
Syntax: show connection-rate-filter < all-hosts | blocked-hosts | throttled-hosts >
all-hosts: Lists, by VLAN membership, all hosts currently
detected in a throttling or blocking state, along with a state
indicator.
throttled-hosts: Lists, by VLAN membership, the hosts cur-
rently in a throttling state due to connection-rate action.
blocked-hosts: Lists, by VLAN membership, the hosts currently
blocked by connection-rate action.
Figure 3-6. Example of Listing the Hosts Currently in Any Connection-Rate State
Figure 3-7. Example of Listing the Hosts Currently Blocked by Connection-Rate
Filtering
If a host becomes blocked by triggering connection-rate filtering on a port
configured to block high connection rates, the host remains blocked on all
ports on the switch, even if you change the per-port filtering configuration or
disable connection-rate filtering. (The SA block imposed by connection-rate
filtering does not age-out.) This is to help prevent a malicious host from
automatically regaining access to the network. When a host becomes blocked
the switch generates the following Event Log message and also sends a similar
message to any configured SNMP trap receivers.
Src IP xxx.xxx.xxx.xxx blocked
3-18
To Next Page
Loading...
Need help?
General