anti-attack flood disable

Function

The anti-attack flood disable disables the flood prevention function.

The undo anti-attack flood disable command enables the flood prevention function.

By default, the flood prevention function is enabled.

Format

anti-attack flood { all | arp | dhcp | dhcpv6 | igmp | mdns | nd | other-broadcast | other-multicast } disable

undo anti-attack flood { all | arp | dhcp | dhcpv6 | igmp | mdns | nd | other-broadcast | other-multicast } disable

Parameters

Parameter	Description	Value
all	Indicates whether to enable the flood prevention function for ARP, DHCP, DHCPv6, IGMP, mDNS, and ND multicast, broadcast, and unicast packets.	-
arp	Indicates whether to enable the ARP flood prevention function.	-
dhcp	Indicates whether to enable the DHCP flood prevention function.	-
dhcpv6	Indicates whether to enable the DHCPv6 flood prevention function.	-
igmp	Indicates whether to enable the IGMP flood prevention function.	-
mdns	Indicates whether to enable the mDNS flood prevention function.	-
nd	Indicates whether to enable the ND flood prevention function.	-
other-broadcast	Indicates whether to enable the flood prevention function for broadcast packets other than ARP, DHCP, DHCPv6, and ND packets.	-
other-multicast	Indicates whether to enable the flood prevention function for multicast packets other than IGMP and mDNS packets.	-

Views

VAP profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If a large number of packets are sent to a device in a short time, the device becomes busy processing the packets and cannot process normal services. To prevent flood attacks, you can configure protocol-based flood prevention.

Example

# Disable the DHCP flood prevention function.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] vap-profile name profile1
[HUAWEI-vap-prof-profile1] anti-attack flood dhcp disable