H3C S7500 Series Instructions d'installation
Command Manual – Telnet Protection
H3C S7500 Series Ethernet Switches Table of Contents
i
Table of Contents
Chapter 1 Telnet Protection Configuration Commands............................................................1-1
1.1 Telnet Protection Configuration Commands......................................................................1-1
1.1.1 attack-protection......................................................................................................1-1
1.1.2 attack-protection disable-defaultroute.....................................................................1-2
1.1.3 attack-protection icmp............................................................................................. 1-2
1.1.4 attack-protection snmp............................................................................................1-3
1.1.5 attack-protection telnet............................................................................................1-4
Command Manual – Telnet Protection
H3C S7500 Series Ethernet Switches Chapter 1 Telnet Protection Configuration Commands
1-1
Chapter 1 Telnet Protection Configuration
Commands
1.1 Telnet Protection Configuration Commands
1.1.1 attack-protection
Syntax
attack-protection [ ip-address ]
undo attack-protection
View
System view
Parameters
ip-address: Sets specialARP Telnet protection for the specified Layer-3 interface.
Description
Use the attack-protection command to set global Telnet protection.After you execute
this command, the system protects all the Layer-3 interfaces in the Up state.
Use the undo attack-protection command to cancel the global Telnet protection.
Use the attack-protection ip-address command to setspecial ARPTelnet protection. If
the Layer-3 interface corresponding to the specified IPaddress is in the Up state, Telnet
protection is enabled on this Layer-3 interface. If the corresponding Layer-3 interface
does not exist or is in the Down state, the system saves this configuration as the special
ARP settings and enables Telnet protection when the corresponding Layer-3 interface
is in the UP state.
Use the undo attack-protection ip-address command to cancel the special ARP
Telnet protection.
Examples
# Configure global Telnet protection.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] attack-protection
# Configure specialARP Telnet protection.
<H3C> system-view
Command Manual – Telnet Protection
H3C S7500 Series Ethernet Switches Chapter 1 Telnet Protection Configuration Commands
1-2
System View: return to User View with Ctrl+Z.
[H3C] attack-protection 192.168.0.1
1.1.2 attack-protection disable-defaultroute
Syntax
attack-protection disable-defaultroute
undo attack-protection disable-defaultroute
View
System view
Parameters
None
Description
Use the attack-protection disable-defaultroute command to disable the default-route
Telnet protection function.
Use the undo attack-protection disable-defaultroute command to enable the
default-route Telnet protection function.
By default, default-route Telnet protection is disabled.
After enabling the NAT function, you cannot configure default-route Telnet protection.
Examples
# Enable default-route Telnet protection.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] undo attack-protection disable-defaultroute
1.1.3 attack-protection icmp
Syntax
attack-protection icmp [ ip-address ]
undo attack-protection icmp
View
System view
Parameters
ip-address: Configures to protect ICMP packets for the specified source IP address.
Command Manual – Telnet Protection
H3C S7500 Series Ethernet Switches Chapter 1 Telnet Protection Configuration Commands
1-3
Description
Use the attack-protection icmp command to enable ICMP protection.
Use the undo attack-protection icmp command to disable ICMP protection.
Before enabling ICMP protection, you need to enable ICMP protection, and then
configure global Telnet protection, special ARP Telnet protection, and default-route
Telnet protection.
By default, ICMP protection is disabled.
Examples
# Protect ICMP packets addressed from the source IP address 192.168.0.100.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] attack-protection icmp 192.168.0.100
1.1.4 attack-protection snmp
Syntax
attack-protection snmp [ ip-address ]
undo attack-protection snmp
View
System view
Parameters
ip-address: Configures to protect SNMP packets for the specified source IP address.
Description
Use the attack-protection snmp command to enable SNMP protection.
Use the undo attack-protection snmp command to disable SNMP protection.
Before enabling SNMP protection, you need to enable SNMP protection, and then
configure global Telnet protection, special ARP Telnet protection, and default-route
Telnet protection.
By default, SNMP protection is disabled.
Examples
# Protect SNMP packets addressed from the source IP address 192.168.0.100.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] attack-protection snmp 192.168.0.100
Command Manual – Telnet Protection
H3C S7500 Series Ethernet Switches Chapter 1 Telnet Protection Configuration Commands
1-4
1.1.5 attack-protection telnet
Syntax
attack-protection telnet [ ip-address ]
undo attack-protection telnet
View
System view
Parameters
ip-address: Configures to protect Telnet packets for the specified source IP address.
Description
Use the attack-protection telnet command to enable Telnet protection.
Use the undo attack-protection telnet command to disable Telnet protection.
Before enabling Telnet protection, you need to enable Telnet protection, and then
configure global Telnet protection, special ARP Telnet protection, and default-route
Telnet protection.
By default, Telnet protection is disabled.
Examples
# Protect Telnet packets addressed from the source IP address 192.168.0.100.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] attack-protection telnet 192.168.0.100
Autres manuels pour S7500 Series
29
Table des matières
Autres manuels H3C Changer
H3C
H3C S12500 Series Manuel utilisateur
H3C
H3C S12500 Series Manuel utilisateur
H3C
H3C S6520X-EI Series Manuel utilisateur
H3C
H3C S10500 Series Manuel utilisateur
H3C
H3C S12500G-AF Series Manuel utilisateur
H3C
H3C S9500E Series Manuel d'installation
H3C
H3C S3100 Series Manuel utilisateur
H3C
H3C S3100 Series Guide d'installation
H3C
H3C S5500-SI Series Manuel utilisateur
H3C
H3C S7500E-XS Series Manuel d'installation
H3C
H3C H3C S7500E Series Manuel utilisateur
H3C
H3C S9500 Series Manuel utilisateur
H3C
H3C s5820x series Manuel d'installation
H3C
H3C S5150-EI Series Manuel utilisateur
H3C
H3C S9500E Series Manuel utilisateur
H3C
H3C S3100 Series Instructions d'installation
H3C
H3C S9500E Series Manuel utilisateur
H3C
H3C S3100 Series Manuel utilisateur
H3C
H3C S9500 Series Manuel utilisateur
H3C
H3C S10500X Series Manuel utilisateur
