Displaying And Maintaining Attack Detection And Prevention - HP FlexNetwork 10500 Series Security Configuration Manual

Hide thumbs Also See for FlexNetwork 10500 Series:
Table of Contents

Advertisement

Step
2.
Enable the login delay
feature.
Displaying and maintaining attack detection and
prevention
Use the display commands in any view and the reset commands in user view.
To display and maintain attack detection and prevention:
Task
Display attack detection and prevention statistics
on an interface (in standalone mode).
Display attack detection and prevention statistics
on an interface (in IRF mode).
Display attack detection and prevention statistics
for the device (in standalone mode).
Display attack detection and prevention statistics
for the device (in IRF mode).
Display attack defense policy configuration.
Display information about IPv4 scanning
attackers.
Display information about IPv6 scanning
attackers.
Display information about IPv4 scanning attack
victims.
Display information about IPv6 scanning attack
victims.
Display flood attack detection and prevention
statistics for an IPv4 address (in standalone
mode).
Display flood attack detection and prevention
statistics for an IPv4 address (in IRF mode).
Command
attack-defense login
reauthentication-delay seconds
Command
display attack-defense statistics interface
interface-type interface-number [ slot slot-number ]
display attack-defense statistics interface
interface-type interface-number [ chassis
chassis-number slot slot-number ]
display attack-defense statistics local [ slot
slot-number ]
display attack-defense statistics local [ chassis
chassis-number slot slot-number ]
display attack-defense policy [ policy-name ]
display attack-defense scan attacker ip [ interface
interface-type interface-number ] [ count ]
display attack-defense scan attacker ipv6 [ interface
interface-type interface-number ] [ count ]
display attack-defense scan victim ip [ interface
interface-type interface-number ] [ count ]
display attack-defense scan victim ipv6 [ interface
interface-type interface-number ] [ count ]
display attack-defense { ack-flood | dns-flood |
fin-flood | flood | http-flood | icmp-flood | rst-flood |
syn-ack-flood | syn-flood | udp-flood } statistics ip
[ ip-address [ vpn vpn-instance-name ] ] [ interface
interface-type interface-number [ slot slot-number ] |
local [ slot slot-number ] ] [ count ]
display attack-defense { ack-flood | dns-flood |
fin-flood | flood | http-flood | icmp-flood | rst-flood |
syn-ack-flood | syn-flood | udp-flood } statistics ip
[ ip-address [ vpn vpn-instance-name ] ] [ interface
interface-type interface-number [ chassis
chassis-number slot slot-number ] | local [ chassis
chassis-number slot slot-number ] ] [ count ]
483
Remarks
By default, the login delay feature
is disabled. The device does not
delay accepting a login request
from a user who has failed a login
attempt.

Advertisement

Table of Contents
loading

Table of Contents