#Siga o passo-a-passo, depois remover as configurações, pois pesa na caixa.
1- reset cpu-defend statistics packet-type ttl-expired all
2- wait 2 min then check send to CPU ttl-expired packets.
display cpu-defend statistics packet-type ttl-expired slot 0
3- please configure cpu-defend policy find the attack-source .
#
cpu-defend policy test
auto-defend enable
auto-defend attack-packet sample 5
auto-defend threshold 30
auto-defend trace-type source-mac source-ip
auto-defend protocol ttl-expired
#
#
cpu-defend-policy test
cpu-defend-policy test global
4- after finished above configuration , we can use below command find the attack-source .
[Quidway] display auto-defend attack-source
Attack Source User Table (MPU):
-----------------------------------------------------------------------------------------------
MacAddress InterfaceName Vlan:Outer/Inner TOTAL
-----------------------------------------------------------------------------------------------
0000-0000-0001 GigabitEthernet5/0/0 500 310
-----------------------------------------------------------------------------------------------
Total: 1
Attack Source IP Table (MPU):
-------------------------------------------------------
IPAddress TOTAL Packets
-------------------------------------------------------
50.1.1.3 310
-------------------------------------------------------
Total: 1
=============
Contribuição Luiz Puppin