Application Scenarios for Attack Defense

As shown in Figure 1, when SwitchA undergoes attacks, its CPU usage increases and network services are affected. To provide secure network services, the following attack defense functions are configured on SwitchA:

• Preventing malformed packet attacks

• Limiting the rate of fragments to protect CPU and device resources

• Preventing flood attacks:

  • Limiting the rate of TCP SYN packets to protect the CPU
  • Discarding UDP packets sent from specified ports
  • Limiting the rate of ICMP packets to protect the CPU