source-prefix (IDS)
Syntax
source-prefix prefix-value;
Hierarchy Level
[edit services ids rule rule-name term term-name then aggregation]
Description
Specify the prefix length for source IPv4 address aggregation for the IDS rule. This applies session limits to an aggregation of all attacks from within a subnet of the specified length.
For example, if you configure a value of 24 for source-prefix, then attacks from 10.1.1.2 and 10.1.1.3 are counted as attacks
from the 10.1.1/24 subnet. However, if a single host on a subnet generates
a large number of network probing or flooding attacks, the flows for
the entire subnet might be stopped.
Options
prefix-value—Integer value.
Range: 1 through 32
Required Privilege Level
interface—To view this statement in the configuration.
interface-control—To add this statement to the configuration.
Release Information
Statement introduced before Junos OS Release 7.4.