aggregations (IDS Screen Next Gen Services)
Syntax
aggregations { destination-prefix-ipv6-mask prefix-length; destination-prefix-mask prefix-length; source-prefix-ipv6-mask prefix-length; source-prefix-mask prefix-length; }
Hierarchy Level
[edit services screen ids-option screen-name]
Description
Configure intrusion detection service session limits for individual destination subnets or source subnets rather than individual addresses. This applies session limits to an aggregation of all sessions from or to an individual subnet of the specified length.
For example, if you configure a value of 24 for destination-prefix-mask
, then sessions to 10.1.1.2 and 10.1.1.3 are counted as sessions
to the 10.1.1/24 subnet.
Options
destination-prefix-ipv6-mask prefix-length | Prefix length for destination IPv6 address subnets.
|
destination-prefix-mask prefix-length | Prefix length for destination IPv4 address subnets.
|
source-prefix-ipv6-mask prefix-length | Prefix length for source IPv6 address subnets.
|
source-prefix-mask prefix-length | Prefix length for source IPv4 address subnets.
|
Required Privilege Level
interface—To view this statement in the configuration.
interface-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 19.3R2.