flow-detection-mode (DDoS Flow Detection)
Syntax
flow-detection-mode (automatic | off | on)
Hierarchy Level
[edit system ddos-protection protocols protocol-group packet-type]
Description
(MX Series routers with only MPCs, T4000 Core Routers with only FPC5s,
or EX9200 switches) Configure the mode of operation for flow detection for a protocol group
or packet type. Use this statement to override global flow detection settings configured with
the flow-detection-mode statement at the [edit system ddos-protection global] hierarchy level. The operation mode is effective only when flow detection is enabled.
Default
The default mode for all protocol groups and packet types is automatic.
Options
| automatic | Detect flows only when the policer is being violated. |
| off | Disable flow detection. |
| on | Always monitor and detect flows, even when the policer is not being violated. |
Required Privilege Level
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 12.3.
Support for Enhanced Subscriber Management added in Junos OS Release 17.3R1.