ZXR102900ESeriesCongurationGuide
CommandFunction
zte(cfg)#setprotocol-protectalarmport<portlist>{enable|disable}
EnablesordisablesthePPalarm
functiononaport.
zte(cfg)#setprotocol-protectalarmport<portlist>{protocol-name}<0-180
00>
SetsPP30second-protocolalarm
threshold.
zte(cfg)#setprotocol-protectlimit{group-name}<0-800>
Setstheratelimitofsendingpackets
totheCPU.
zte(cfg)#setprotocol-protectpriority{protocol-name|all}{<0-7>|default}SetsPPprotocolpriority.
zte(cfg)#setprotocol-protectmac-drop{disable|enable}Enablesthemacdropfunction.
zte(cfg)#setprotocol-protectmac-droprule<1-128>bindport<portlist>Bindsthemacdroprulewiththeport.
zte(cfg)#clearprotocol-protectmac-dropcounter[port<portlist>]
Clearsthenumberofmessages
droppedbythemacdropfunction.
zte(cfg)#clearprotocol-protectmac-dropport<portlist>[rule<1-128>]
Clearsthemacdroprulesforspecied
orallports.
zte(cfg)#clearprotocol-protectmac-droprule[<1-128>]Clearsspeciedmacdroprules.
showprotocol-protectstatistic[port<portlist>](allcongurationmodes)
Displaysstatisticsinformationof
protocolpacketalarmsonaPPport.
showprotocol-protectlimit(allcongurationmodes)DisplaysPPratelimitinformation.
showprotocol-protectpriority(allcongurationmodes)
Displayspacketpriorityconguration
information.
showprotocol-protectmac-dropport[<portlist>](allcongurationmodes)Displaystherulesandstatisticsbound
withaspeciedport.
showprotocol-protectmac-droprule[<1-128>](allcongurationmodes)Displaysspeciedmacdroprules.
PPCongurationInstance
lCongurationDescription
AsshowninFigure4-49,Host1sendsDHCPattackpackets.Userscanview
thedeviceoperatingstatusandalarminformation.UsersalsocanviewIGMP
operatingstatusunderDHCPpacketattacks.TheroutersendsIGMPquerypackets
periodically.
4-124
SJ-20120409144109-002|2012-07-02(R1.0)ZTEProprietaryandCondential