1083syn-ack-flood detect non-specificUse syn-ack-flood detect non-specific to enable global SYN-ACK flood attack detection.Use undo syn-ack-flood detect non-specific to disable global SYN-ACK flood attack detection.Syntaxsyn-ack-flood detect non-specificundo syn-ack-flood detect non-specificDefaultGlobal SYN-ACK flood attack detection is disabled.ViewsAttack defense policy viewPredefined user rolesnetwork-adminUsage guidelinesThe global SYN-ACK flood attack detection applies to all IP addresses except for those specified bythe syn-ack-flood detect command. The global detection uses the global trigger threshold set bythe syn-ack-flood threshold command and global actions specified by the syn-ack-flood actioncommand.Examples# Enable global SYN-ACK flood attack detection in the attack defense policy atk-policy-1. system-view[Sysname] attack-defense policy atk-policy-1[Sysname-attack-defense-policy-atk-policy-1] syn-ack-flood detect non-specificRelated commandssyn-ack-flood actionsyn-ack-flood detectsyn-ack-flood thresholdsyn-ack-flood thresholdUse syn-ack-flood threshold to set the global threshold for triggering SYN-ACK flood attackprevention.Use undo syn-ack-flood threshold to restore the default.Syntaxsyn-ack-flood threshold threshold-valueundo syn-ack-flood thresholdDefaultThe global threshold is 1000 for triggering SYN-ACK flood attack prevention.ViewsAttack defense policy view
