The auto-defend enable command enables automatic attack source tracing.
The undo auto-defend enable command disables automatic attack source tracing.
By default, attack source tracing is enabled.
Usage Scenario
A large number of attack packets may attack the device CPU. Attack source tracing enables the device to trace attack sources and send logs or alarms to notify the administrator so that the administrator can take measures to defend against the attacks. By default, logs are sent to notify the administrator if attack source tracing is enabled.
After automatic attack source tracing is enabled, the device traces the source of the specified packets sent to the CPU. The packet type can be set using the auto-defend protocol command.
Precautions
Attack source tracing configured in an attack defense policy takes effect only when the attack defense policy is applied in the system view.
If the system software of a switch in a version earlier than V200R009C00 is upgraded to V200R009C00 or later version, an undo auto-defend enable configuration is automatically generated.