< Home

reset auto-defend attack-source trace-type

Function

The reset auto-defend attack-source trace-type command clears the counter of packets traced after attack source tracing based on source MAC addresses, source IP addresses, or source ports+VLANs is configured.

Format

reset auto-defend attack-source trace-type { source-mac [ mac-address ] | source-ip [ ipv4-address | ipv6 ipv6-address ] | source-portvlan [ interface interface-type interface-number vlan-id vlan-id [ cvlan-id cvlan-id ] ] } [ slot slot-id ]

Parameters

Parameter Description Value
source-mac [ mac-address ]

Clears the counter of packets traced after attack source tracing based on source MAC addresses is configured.

If mac-address is specified, the counter of traced packets sent from the specified MAC address is cleared.

The value of mac-address is in H-H-H format. An H contains 1 to 4 hexadecimal numbers.
source-ip [ ipv4-address | ipv6 ipv6-address ]

Clears the counter of packets traced after attack source tracing based on source IP addresses is configured.

If an ip-address is specified, the counter of traced packets sent from the specified IP address is cleared.

  • ipv4-address specifies the IPv4 address of an interface.
  • ipv6 ipv6-address specifies the IPv6 address of an interface.
  • The value of ipv4-address is in dotted decimal notation.
  • The value of ipv6-address is in format X:X:X:X:X:X:X:X. The total length is 128 bit, which is divided into eight groups. The 16 bits of each group are represented by four hexadecimal characters.
source-portvlan [ interface interface-type interface-number vlan-id vlan-id [ cvlan-id cvlan-id ] ]

Clears the counter of packets traced after attack source tracing based on source ports+VLANs is configured.

If a port or VLAN is specified, the counter of traced packets sent from the specified port or VLAN is cleared.

  • interface-type specifies the interface type.

  • interface-number specifies the interface number.

  • vlan-id vlan-id specifies the ID of the VLAN.

  • cvlan-id cvlan-id specifies the inner VLAN ID in a QinQ packet.

vlan-id is an integer that ranges from 1 to 4094. cvlan-id is an integer that ranges from 1 to 4094.
slot slot-id
  • This parameter specifies the slot ID if stacking is not configured.
  • This parameter specifies the stack ID if stack is enabled.
The value must be set according to the device configuration.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To view information about attack sources in a specified period, run the reset auto-defend attack-source command to clear existing information about attack sources and run the display auto-defend attack-source command. However, the reset auto-defend attack-source clears information about all attack sources. You can run the reset auto-defend attack-source trace-type command to clear information about specified attack sources.

Precautions

After the reset auto-defend attack-source trace-type command is run, information about attack sources is cleared and cannot be restored.

Example

# Clear the counter of traced packets sent from IP address 10.1.1.1.

<HUAWEI> system-view
[HUAWEI] reset auto-defend attack-source trace-type source-ip 10.1.1.1
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >