Configure the network device to protect against or limit the effects of all known types of DoS attacks by employing organization-defined security safeguards. SSH example: set system services ssh connection-limit <1..250> set system services ssh rate-limit <1..250> NETCONF over SSH example: set system services netconf ssh connection-limit <1..250> set system services netconf ssh rate-limit <1..250> Example firewall filters: set firewall family inet filter term 1 from destination-address set firewall family inet filter term 1 from source-prefix-list set firewall family inet filter term 1 from protocol tcp set firewall family inet filter term 1 from destination-port 22 set firewall family inet filter term 1 from tcp-initial set firewall family inet filter term 1 then policer policer-32k set firewall family inet filter term 1 then syslog set firewall family inet filter term 1 then accept set firewall family inet filter term 2 from destination-address set firewall family inet filter term 2 from source-prefix-list set firewall family inet filter term 2 from protocol tcp set firewall family inet filter term 2 from destination-port 22 set firewall family inet filter term 2 then syslog set firewall family inet filter term 2 then accept set firewall family inet filter term default then syslog set firewall family inet filter term default then discard set firewall family inet6 filter term 1 from destination-address set firewall family inet6 filter term 1 from source-prefix-list set firewall family inet6 filter term 1 from next-header tcp set firewall family inet6 filter term 1 from destination-port 22 set firewall family inet6 filter term 1 from tcp-initial set firewall family inet6 filter term 1 then policer policer-32k set firewall family inet6 filter term 1 then syslog set firewall family inet6 filter term 1 then accept set firewall family inet6 filter term 2 from destination-address set firewall family inet6 filter term 2 from source-prefix-list set firewall family inet6 filter term 2 from next-header tcp set firewall family inet6 filter term 2 from destination-port 22 set firewall family inet6 filter term 2 then syslog set firewall family inet6 filter term 2 then accept set firewall family inet6 filter term default then syslog set firewall family inet6 filter term default then discard Example interface configuration: set interfaces unit 0 family inet filter input set interfaces unit 0 family inet address / set interfaces unit 0 family inet6 filter input set interfaces unit 0 family inet6 address /

Detections

Analytics

Item Search