Figure 44 – H3C Technologies H3C SecPath F1000-E User Manual

Page 45

Advertising
background image

37

Figure 44 Adding an IP address entry for protection

Enter 20.0.0.10 in the Protected IP Address field.

Click Apply.

# Configure the SYN flood detection feature, specifying to automatically add protected IP address

entries.

Select Intrusion Detection > Traffic Abnormality > SYN Flood from the navigation tree. In the Attack
Prevention Policy area, configure the action to be taken upon detecting a SYN flood attack, as

shown in

Figure 45

.

Figure 45 Configuring the action to be taken upon detecting a SYN flood

Select Trust from the Security Zone list.

Select the Add protected IP entry to TCP Proxy box in the Attack Prevention Policy area.

Click Apply.

In the SYN Flood Configuration area, click Add. Configure global settings as shown in

Figure 46

.

Advertising