华为s5700防攻击配置

#cpu-defend policy d03                     

 auto-defend enable

 auto-defend attack-packet sample 10

 auto-defend threshold 64

 auto-defend alarm enable

 auto-defend alarm threshold 64

 auto-defend trace-type source-mac source-ip source-portvlan

 auto-defend protocol all

 auto-defend action error-down

 auto-defend whitelist 1 interface GigabitEthernet0/0/22

 auto-defend whitelist 2 interface GigabitEthernet0/0/23

#cpu-defend-policy d03 global