Huawei AR1200-S User Manual

To prevent the network devices from being attacked and to ensure normal network services,
defense against abnormal packet attacks must be configured.
Pre-configuration Tasks
Before configuring defense against abnormal packet attacks, complete the following tasks:
l Setting the link layer protocol parameters (and the IP address) for the interface to make the
status of link protocol Up
Data Preparation
None.
14.2.2 Enabling Defense Against Abnormal Packet Attacks
The major measure to defend attacks from malformed packets is to determine the packet type.
If a packet is of the malformed type, it is discarded directly.
Context
Do as follows on the router:
Procedure
Step 1 Run the system-view command to enter the system view.
Step 2 Run the anti-attack abnormal enable command to enable defense against abnormal packet
attacks.
The defense against abnormal packet attacks is enabled by default. If defense against abnormal
packet attacks is disabled, run the command to enable it.
----End
14.2.3 Checking the Configuration
After configuring defense against attacks from malformed packets, you can view statistics about
defense against malformed packets.
Prerequisites
The configurations of the abnormal packet attack defense are complete.
Procedure
Step 1 Run the display anti-attck statistics abnormal command to check the statistics of defense
against abnormal packet attacks on the interface board.
----End
Example
After the configuration is complete, run the display anti-attck statistics abnormal command
to check the statistics of defense against abnormal packet attacks on the interface board.
Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security
14 Configuration of Attack Defense and Application Layer
Association
Issue 02 (2012-03-30) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
284

Huawei AR1200-S Specifications

General

Brand	Huawei
Model	AR1200-S
Category	Network Router
Language	English