H3C S7500 Series Installation instructions
Command Manual – Telnet Protection
H3C S7500 Series Ethernet Switches Table of Contents
i
Table of Contents
Chapter 1 Telnet Protection Configuration Commands............................................................1-1
1.1 Telnet Protection Configuration Commands......................................................................1-1
1.1.1 attack-protection......................................................................................................1-1
1.1.2 attack-protection disable-defaultroute.....................................................................1-2
1.1.3 attack-protection icmp............................................................................................. 1-2
1.1.4 attack-protection snmp............................................................................................1-3
1.1.5 attack-protection telnet............................................................................................1-4
Command Manual – Telnet Protection
H3C S7500 Series Ethernet Switches Chapter 1 Telnet Protection Configuration Commands
1-1
Chapter 1 Telnet Protection Configuration
Commands
1.1 Telnet Protection Configuration Commands
1.1.1 attack-protection
Syntax
attack-protection [ ip-address ]
undo attack-protection
View
System view
Parameters
ip-address: Sets specialARP Telnet protection for the specified Layer-3 interface.
Description
Use the attack-protection command to set global Telnet protection.After you execute
this command, the system protects all the Layer-3 interfaces in the Up state.
Use the undo attack-protection command to cancel the global Telnet protection.
Use the attack-protection ip-address command to setspecial ARPTelnet protection. If
the Layer-3 interface corresponding to the specified IPaddress is in the Up state, Telnet
protection is enabled on this Layer-3 interface. If the corresponding Layer-3 interface
does not exist or is in the Down state, the system saves this configuration as the special
ARP settings and enables Telnet protection when the corresponding Layer-3 interface
is in the UP state.
Use the undo attack-protection ip-address command to cancel the special ARP
Telnet protection.
Examples
# Configure global Telnet protection.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] attack-protection
# Configure specialARP Telnet protection.
<H3C> system-view
Command Manual – Telnet Protection
H3C S7500 Series Ethernet Switches Chapter 1 Telnet Protection Configuration Commands
1-2
System View: return to User View with Ctrl+Z.
[H3C] attack-protection 192.168.0.1
1.1.2 attack-protection disable-defaultroute
Syntax
attack-protection disable-defaultroute
undo attack-protection disable-defaultroute
View
System view
Parameters
None
Description
Use the attack-protection disable-defaultroute command to disable the default-route
Telnet protection function.
Use the undo attack-protection disable-defaultroute command to enable the
default-route Telnet protection function.
By default, default-route Telnet protection is disabled.
After enabling the NAT function, you cannot configure default-route Telnet protection.
Examples
# Enable default-route Telnet protection.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] undo attack-protection disable-defaultroute
1.1.3 attack-protection icmp
Syntax
attack-protection icmp [ ip-address ]
undo attack-protection icmp
View
System view
Parameters
ip-address: Configures to protect ICMP packets for the specified source IP address.
Command Manual – Telnet Protection
H3C S7500 Series Ethernet Switches Chapter 1 Telnet Protection Configuration Commands
1-3
Description
Use the attack-protection icmp command to enable ICMP protection.
Use the undo attack-protection icmp command to disable ICMP protection.
Before enabling ICMP protection, you need to enable ICMP protection, and then
configure global Telnet protection, special ARP Telnet protection, and default-route
Telnet protection.
By default, ICMP protection is disabled.
Examples
# Protect ICMP packets addressed from the source IP address 192.168.0.100.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] attack-protection icmp 192.168.0.100
1.1.4 attack-protection snmp
Syntax
attack-protection snmp [ ip-address ]
undo attack-protection snmp
View
System view
Parameters
ip-address: Configures to protect SNMP packets for the specified source IP address.
Description
Use the attack-protection snmp command to enable SNMP protection.
Use the undo attack-protection snmp command to disable SNMP protection.
Before enabling SNMP protection, you need to enable SNMP protection, and then
configure global Telnet protection, special ARP Telnet protection, and default-route
Telnet protection.
By default, SNMP protection is disabled.
Examples
# Protect SNMP packets addressed from the source IP address 192.168.0.100.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] attack-protection snmp 192.168.0.100
Command Manual – Telnet Protection
H3C S7500 Series Ethernet Switches Chapter 1 Telnet Protection Configuration Commands
1-4
1.1.5 attack-protection telnet
Syntax
attack-protection telnet [ ip-address ]
undo attack-protection telnet
View
System view
Parameters
ip-address: Configures to protect Telnet packets for the specified source IP address.
Description
Use the attack-protection telnet command to enable Telnet protection.
Use the undo attack-protection telnet command to disable Telnet protection.
Before enabling Telnet protection, you need to enable Telnet protection, and then
configure global Telnet protection, special ARP Telnet protection, and default-route
Telnet protection.
By default, Telnet protection is disabled.
Examples
# Protect Telnet packets addressed from the source IP address 192.168.0.100.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] attack-protection telnet 192.168.0.100
Other manuals for S7500 Series
29
Table of contents
Other H3C Switch manuals
H3C
H3C H3C S7500E Series User manual
H3C
H3C S5560X-HI Series Installation manual
H3C
H3C S5820 series Installation manual
H3C
H3C S3100 Series User manual
H3C
H3C EPON OLT User manual
H3C
H3C S12500 Series User manual
H3C
H3C S12500X-2L User manual
H3C
H3C S6861 Series User manual
H3C
H3C s5820x series User manual
H3C
H3C S9500 Series User manual
H3C
H3C S5500-SI Series User manual
H3C
H3C H3C S5600 Series User manual
H3C
H3C 6W101 Operating and maintenance manual
H3C
H3C S6820 Series User manual
H3C
H3C S6860 Series User manual
H3C
H3C S12500-X User manual
H3C
H3C S5500-EI series User manual
H3C
H3C S5120-EI Series User manual
H3C
H3C S5590-HI Series User manual
H3C
H3C S5830V2 series User manual
