Amer Networks WLO220T CLI - Manual (Page 13)

C O M M A N D D E S C R I P T I O N S
alert
2
10 CLI Reference Guide
alert
Use the alert command to configure or display information about conditions for which the system
should alert the user. An alert needs to be attached to another object that describes the
connections to monitor, such as a policy, profile, or signature.
There are three different types of alerts: aggr-bandwidth, conn-bandwidth and conn-rate.
Connection bandwidth refers to the amount of traffic occurring on a single connection within the
group of connections. Aggregate bandwidth refers to the total amount of traffic of all of the
connections within the group. Connection rate refers to the number of connections being created
within the group.
For information about getting or clearing alert records, see the alert-record command on page
2-12.
Syntax
Keywords and Variables
action
The action option determines what should be done when a packet has triggered an alert. At least
one of shape and log must be selected.
Example
set alert … action [shape] [log {always | once}] …
If you use the shape option, the packet or connection that caused the alert will be dropped.
If you use the log option, the information about the connection or packet that caused the alert
will be sent to the logging system.
The always or once option determines how often an alert is sent. If you use the once option, then
a single event will be sent. If you use the always option, then an event will be sent whenever the
alert is triggered. For example, if an alert specifies a connection limit of 2 connections per second,
the alert will be sent to the logging system each time there are more than 2 connections created
in a second.
Example
The following command specifies that the packet should be dropped when the bandwidth for a
connection exceeds 10Kbps. Information about the alert is not logged.
set alert conn-bandwidth conn-bandwidth-limit threshold 10Kbps action shape
get get alert
set set alert {aggr-bandwidth | conn-bandwidth | conn-rate} alert-name
threshold threshold-value
action [shape] [log {always | once} [frequency freq-value]]
unset unset alert {aggr-bandwidth | conn-bandwidth |
conn-rate} alert-name