ddos-guard udp enable

Enables protection, on all or a range of ports, from UDP packet flooding.

Syntax

ddos-guard udp enable
                  port

[ all | start port to end port]

no ddos-guard udp enable port [ all | start port to end port]

Command Default

By default, the ports are not protected from UPD packet flooding.

Parameters

all: Enable DDoS protection on all ports for all the UDP packets coming to CPU.
start port to end port: Specify the start and end ports for enabling DDoS protection from UDP packet flooding. The port range is from 0 to 65535.

Modes

Global configuration mode

Privileged EXEC mode

Global configuration mode

Usage Guidelines

This command is supported on ICX 8200 devices only.

The no form of the command disables the DDoS protection on the ports from UDP packet flooding on all ports.

Examples

The following example enables DDoS protection for all the UDP packets.

device# configure terminal
device(config)# ddos-guard udp enable port all

The following example enables DDoS protection from UDP packet flooding on a range of ports.

device# configure terminal
device(config)# ddos-guard udp enable port 1000 to 30000

History

Release version	Command history
10.0.20a	This command was introduced.