beautypg.com

Verifying the configuration, Configuring traffic abnormality detection, Configuring icmp flood detection – H3C Technologies H3C SecBlade LB Cards User Manual

Page 231

background image

220

Figure 109 Enabling Land and Smurf attack detection for the untrusted zone

Verifying the configuration

Check that the device can detect Land and Smurf attacks from the untrusted zone, output alarm logs
accordingly, and drop the attack packets.
You can select Security > Intrusion Detection > Statistics from the navigation tree to view the counts of

Land and Smurf attacks and the counts of dropped attack packets.

Configuring traffic abnormality detection

Configuring ICMP flood detection

ICMP flood detection is mainly intended to protect servers and is usually configured for an internal zone.

1.

From the navigation tree, select Security > Intrusion Detection > ICMP Flood.
The ICMP flood detection configuration page appears.

This manual is related to the following products: