[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

by-destination

Syntax


            
               by-destination {
               hold-time seconds;
               
               maximum number;
               
               packets number;
               
               rate number;
               
               }

Hierarchy Level


            
               [edit services ids rule rule-name term term-name then session-limit]

Release Information

Statement introduced before JUNOS Release 7.4.

Description

Apply limit to sessions based on numbers generated from the configured destination (IP or subnet) or application.

Options

hold-time seconds—Length of time for which to stop all new flows once the rate of events exceeds the threshold set by one or more of the maximum, packets, or rate statements.
maximum number—Maximum number of open sessions per application or IP address.
packets number—Maximum peak packets per second per application or IP address.
rate number—Maximum number of sessions per second per application or IP address.

Usage Guidelines

See Configuring IDS Rules.

Required Privilege Level

interface—To view this statement in the configuration.

interface-control—To add this statement to the configuration.

[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]