T07-0303 CP CAR Attack Source Tracing Test
Hello Dears
I was doing CP CAR of the interface card test based on the Huawei PAT document for AR2240
I can not select the slot to apply cpu-defend-policy command on the router and when I select global for slot part
the pc ping the router even though the cpu-defend -policy-ww is applied to globally
this is for test purpose only ( no private information is included here)
I attached below the test procedure and expected result , why is the test not working because I the ping is successful eventhough I put CPU attack defense policy on The router ?
Objective | To test CP CAR of the Interface Card. |
Networking diagram |
|
Prerequisites | The PC is connected to Router A according to the networking diagram, and Router A is to be tested. |
Test procedure | Configure the CPU attack defense policy on Router A. <Huawei> system-view [Huawei] sysname RouterA [RouterA] cpu-defend policy ww [RouterA-cpu-defend-policy-ww] deny packet-type icmp [RouterA-cpu-defend-policy-ww] quit Apply the policy to the interface card. [RouterA] cpu-defend-policy ww slot 2 Configure a network connection between Router A and the PC. [RouterA] vlan 10 [RouterA-vlan10] quit [RouterA] interface Vlanif 10 [RouterA-Vlanif10] ip address 131.131.131.1 24 [RouterA-Vlanif10] quit [RouterA] interface GigabitEthernet 4/0/1 [RouterA-Ethernet2/0/0] port link-type access [RouterA-Ethernet2/0/0] port default vlan 10 [RouterA-Ethernet2/0/0] quit Ping VLANIF 10 address 131.131.131.1 on Router A from the PC. Expected result 1 is displayed. Unbind the attack defense policy from Router A. [RouterA] undo cpu-defend-policy slot 2 ( Ping VLANIF 10 address 131.131.131.1 on Router A from the PC. Expected result 2 is displayed. |
Expected results | The PC fails to ping 131.131.131.1. The PC pings 131.131.131.1 successfully. |
Remarks | None. |
Internal number | T07-0301 |
SO my question is how can I apply the policy on the slot or globally to get the Expected results
Thanks
- x
- convention：
- Emotion(0)
Berakia
Created Feb 8, 2021 07:34:52
(0)
(0)
Hi@Chenhui VRP (R) software, Version 5.170 (AR2200 V200R009C00SPC500) Copyright (C) 2011-2018 HUAWEI TECH CO., LTD Huawei AR2240 Router uptime is 0 week, 0 day, 1 hour, 6 minutes BKP 0 version information: 1. PCB Version : AR01BAK2B VER.A 2. If Supporting PoE : Yes 3. Board Type : AR2240 4. MPU Slot Quantity : 1 5. LPU Slot Quantity : 8 MPU 11(Master) : uptime is 0 week, 0 day, 1 hour, 3 minutes SDRAM Memory Size : 2048 M bytes Flash 0 Memory Size : 16 M |
Comment
- Politically sensitive content
- Content concerning pornography, gambling, and drug abuse
- Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
