H3C S7500 Series Installation instructions
Command Manual – Telnet Protection
H3C S7500 Series Ethernet Switches Table of Contents
i
Table of Contents
Chapter 1 Telnet Protection Configuration Commands............................................................1-1
1.1 Telnet Protection Configuration Commands......................................................................1-1
1.1.1 attack-protection......................................................................................................1-1
1.1.2 attack-protection disable-defaultroute.....................................................................1-2
1.1.3 attack-protection icmp............................................................................................. 1-2
1.1.4 attack-protection snmp............................................................................................1-3
1.1.5 attack-protection telnet............................................................................................1-4
Command Manual – Telnet Protection
H3C S7500 Series Ethernet Switches Chapter 1 Telnet Protection Configuration Commands
1-1
Chapter 1 Telnet Protection Configuration
Commands
1.1 Telnet Protection Configuration Commands
1.1.1 attack-protection
Syntax
attack-protection [ ip-address ]
undo attack-protection
View
System view
Parameters
ip-address: Sets specialARP Telnet protection for the specified Layer-3 interface.
Description
Use the attack-protection command to set global Telnet protection.After you execute
this command, the system protects all the Layer-3 interfaces in the Up state.
Use the undo attack-protection command to cancel the global Telnet protection.
Use the attack-protection ip-address command to setspecial ARPTelnet protection. If
the Layer-3 interface corresponding to the specified IPaddress is in the Up state, Telnet
protection is enabled on this Layer-3 interface. If the corresponding Layer-3 interface
does not exist or is in the Down state, the system saves this configuration as the special
ARP settings and enables Telnet protection when the corresponding Layer-3 interface
is in the UP state.
Use the undo attack-protection ip-address command to cancel the special ARP
Telnet protection.
Examples
# Configure global Telnet protection.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] attack-protection
# Configure specialARP Telnet protection.
<H3C> system-view
Command Manual – Telnet Protection
H3C S7500 Series Ethernet Switches Chapter 1 Telnet Protection Configuration Commands
1-2
System View: return to User View with Ctrl+Z.
[H3C] attack-protection 192.168.0.1
1.1.2 attack-protection disable-defaultroute
Syntax
attack-protection disable-defaultroute
undo attack-protection disable-defaultroute
View
System view
Parameters
None
Description
Use the attack-protection disable-defaultroute command to disable the default-route
Telnet protection function.
Use the undo attack-protection disable-defaultroute command to enable the
default-route Telnet protection function.
By default, default-route Telnet protection is disabled.
After enabling the NAT function, you cannot configure default-route Telnet protection.
Examples
# Enable default-route Telnet protection.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] undo attack-protection disable-defaultroute
1.1.3 attack-protection icmp
Syntax
attack-protection icmp [ ip-address ]
undo attack-protection icmp
View
System view
Parameters
ip-address: Configures to protect ICMP packets for the specified source IP address.
Command Manual – Telnet Protection
H3C S7500 Series Ethernet Switches Chapter 1 Telnet Protection Configuration Commands
1-3
Description
Use the attack-protection icmp command to enable ICMP protection.
Use the undo attack-protection icmp command to disable ICMP protection.
Before enabling ICMP protection, you need to enable ICMP protection, and then
configure global Telnet protection, special ARP Telnet protection, and default-route
Telnet protection.
By default, ICMP protection is disabled.
Examples
# Protect ICMP packets addressed from the source IP address 192.168.0.100.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] attack-protection icmp 192.168.0.100
1.1.4 attack-protection snmp
Syntax
attack-protection snmp [ ip-address ]
undo attack-protection snmp
View
System view
Parameters
ip-address: Configures to protect SNMP packets for the specified source IP address.
Description
Use the attack-protection snmp command to enable SNMP protection.
Use the undo attack-protection snmp command to disable SNMP protection.
Before enabling SNMP protection, you need to enable SNMP protection, and then
configure global Telnet protection, special ARP Telnet protection, and default-route
Telnet protection.
By default, SNMP protection is disabled.
Examples
# Protect SNMP packets addressed from the source IP address 192.168.0.100.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] attack-protection snmp 192.168.0.100
Command Manual – Telnet Protection
H3C S7500 Series Ethernet Switches Chapter 1 Telnet Protection Configuration Commands
1-4
1.1.5 attack-protection telnet
Syntax
attack-protection telnet [ ip-address ]
undo attack-protection telnet
View
System view
Parameters
ip-address: Configures to protect Telnet packets for the specified source IP address.
Description
Use the attack-protection telnet command to enable Telnet protection.
Use the undo attack-protection telnet command to disable Telnet protection.
Before enabling Telnet protection, you need to enable Telnet protection, and then
configure global Telnet protection, special ARP Telnet protection, and default-route
Telnet protection.
By default, Telnet protection is disabled.
Examples
# Protect Telnet packets addressed from the source IP address 192.168.0.100.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] attack-protection telnet 192.168.0.100
Other manuals for S7500 Series
29
Table of contents
Other H3C Switch manuals
H3C
H3C S12500X-2L User manual
H3C
H3C S5120-HI Series User manual
H3C
H3C LSW1SP4P0 User manual
H3C
H3C S5500-SI Series User manual
H3C
H3C S5500-EI series User manual
H3C
H3C S9500 Series User manual
H3C
H3C H3C S7500E-X User manual
H3C
H3C LSPM1FANSA User manual
H3C
H3C S5120-SI Series Installation manual
H3C
H3C S9500E Series User manual
H3C
H3C S9500 Series User manual
H3C
H3C S9500 Series Installation instructions
H3C
H3C S5120-EI Series Operating and maintenance manual
H3C
H3C S6550XE-HI Series User manual
H3C
H3C S12500 Series User manual
H3C
H3C S9820-8C-SAN User manual
H3C
H3C S12500 Series User manual
H3C
H3C S12500 Series Service manual
H3C
H3C S5120-EI Series User manual
H3C
H3C S7500E-XS Series Installation manual
