1054Examples# Configure FIN flood attack detection for 192.168.1.2 in the attack defense policy atk-policy-1. system-view[Sysname] attack-defense policy atk-policy-1[Sysname-attack-defense-policy-atk-policy-1] fin-flood detect ip 192.168.1.2 threshold2000Related commandsfin-flood actionfin-flood detect non-specificfin-flood thresholdfin-flood detect non-specificUse fin-flood detect non-specific to enable global FIN flood attack detection.Use undo fin-flood detect non-specific to disable global FIN flood attack detection.Syntaxfin-flood detect non-specificundo fin-flood detect non-specificDefaultGlobal FIN flood attack detection is disabled.ViewsAttack defense policy viewPredefined user rolesnetwork-adminUsage guidelinesThe global FIN flood attack detection applies to all IP addresses except for those specified by thefin-flood detect command. The global detection uses the global trigger threshold set by thefin-flood threshold command and global actions specified by the fin-flood action command.Examples# Enable global FIN flood attack detection in the attack defense policy atk-policy-1. system-view[Sysname] attack-defense policy atk-policy-1[Sysname-attack-defense-policy-atk-policy-1] fin-flood detect non-specificRelated commandsfin-flood actionfin-flood detectfin-flood thresholdfin-flood thresholdUse fin-flood threshold to set the global threshold for triggering FIN flood attack prevention.Use undo fin-flood threshold to restore the default.
