udp-packet-defend enable

Function

The udp-packet-defend enable command enables defense against UDP packet attacks.

The undo udp-packet-defend enable command disables defense against UDP packet attacks.

By default, defense against UDP packet attack is enabled.

Format

udp-packet-defend enable

undo udp-packet-defend enable

Parameters

None

Views

Attack defense policy view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
device-mgr	write

Usage Guidelines

Usage Scenario

When defense against UDP packet attacks is enabled, UDP check is performed on the packets received by the board. The packet that pass UDP check are sent. The packets that fail to pass UDP check are discarded. The packets of which the destination port is 7, 13, or 19 are discarded.

In VS mode, this command is supported only by the admin VS.

Example

# Disable defense against UDP packet attacks of attack defense policy 6.

<HUAWEI> system-view
[~HUAWEI] cpu-defend policy 6
[*HUAWEI-cpu-defend-policy-6] undo udp-packet-defend enable
[*HUAWEI-cpu-defend-policy-6] quit