flow-detection (DDoS Flow Detection)
Syntax
flow-detection;
Hierarchy Level
[edit system ddos-protection global]
Description
(MX Series routers with only MPCs, T4000 Core Routers with only FPC5s, or EX9200 switches) Enable flow detection globally for all protocol groups and packet types except the following, which do not have typical Ethernet, IP, or IPv6 headers:
Protocol groups:
fab-probe,frame-relay,inline-ka,isis,jfm,mlp,pfe-alive,pos, andservices.Packet type:
unclassifiedin theip-optionsprotocol group.
Required Privilege Level
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 12.3. Statement is supported on PTX10003 and PTX10008. Use Feature Explorer to confirm platform support for this feature.
Support for Enhanced Subscriber Management added in Junos OS Release 17.3R1.