Cisco Cisco ASR 5000
ACS Configuration Mode Commands
firewall dos-protection flooding ▀
Command Line Interface Reference, StarOS Release 18 ▄
475
firewall dos-protection flooding
This command is configured to protect servers from mobile subscribers in the uplink direction.
Important:
In StarOS 17.0 and later releases, the uplink flooding feature is not enabled in the ACS
Configuration mode, and must be enabled in the Firewall-and-NAT Policy Configuration mode. Hence, this command is
no longer supported and left in place for backward compatibility.
no longer supported and left in place for backward compatibility.
Product
PSF
NAT
Privilege
Security Administrator, Administrator
Mode
Exec > ACS Configuration
active-charging service service_name
Entering the above command sequence results in the following prompt:
[local]host_name(config-acs)#
Syntax
firewall dos-protection flooding { { icmp | tcp-syn | udp } protect-servers { all | host-
pool hostpool_name } packet limit packet_limit | inactivity-timeout timeout | uplink-
sample-interval interval }
pool hostpool_name } packet limit packet_limit | inactivity-timeout timeout | uplink-
sample-interval interval }
default firewall dos-protection flooding { icmp | tcp-syn | udp | inactivity-timeout |
uplink-sample-interval }
uplink-sample-interval }
no firewall dos-protection flooding { icmp | tcp-syn | udp }
no
Disables Stateful Firewall protection for subscribers against the specified Denial of Service (DoS) attack(s).
default
Disables Stateful Firewall protection for subscribers against all DoS attacks.
flooding { icmp | tcp-syn | udp } protect-servers { all | host-pool hostpool_name
Enables protection against the specified flooding attack:
icmp
: Enables ICMP uplink flooding protection.
tcp-syn
: Enables TCP Syn uplink flooding protection.
udp
: Enables UDP uplink flooding protection.
all
: Enables protection for all the servers.
host-pool hostpool_name
: Specifies the name of the host pool.
hostpool_name
must be an
alphanumeric string of 1 through 63 characters.