H3C Technologies H3C SecBlade IPS Cards - Manual (Page 177)

17-20
DDoS Protection Configuration Example
Network requirements
As shown in Figure 17-18 , it is required to configure DDoS protection on IPS so that it can protect the
internal HTTP server (which has IP address 192.168.10.100 and resides on the internal zone of
segment 0) from DDoS attacks without affecting normal services.
Figure 17-18 Network diagram for DDoS protection configuration
Configuration procedure
# Apply the default DDoS policy DDoS Policy on segment 0.
z Select DDoS > Segment Policies from the navigation tree, and click Add, as shown in Figure
17-19 . Apply the default DDoS policy on segment 0 as shown in Figure 17-20 .
Figure 17-19 DDoS policy application list