Configure Intercepting Attack with Same Source and Destination IP Address
Network Requirements
- Device configures the detection function of intercepting the attack with the same source and destination IP address, detecting the attack packet and dropping it.
Network Topology
![Networking of configuring intercepting the attack with the same source and destination IP address](/storage/images/Document/Maipu/security/config-intercepting-the-attack.jpg)
Figure 17–2 Networking of configuring intercepting the attack with the same source and destination IP address
Configuration Steps
Step 1: Configure VLAN and add the port to the corresponding VLAN. (Omitted)
Step 2: Configure the IP address of the interface. (Omitted)
Step 3: Configure the attack detection function.
#Configure the detection function of intercepting the attack with the same source and destination IP address.
Device#configure terminal
Device(config)# anti-attack detect src-dst-ip-equal
|
Step 4: Check the result.
#When Attacker initiates the packet attack with the same source and destination IP address to PC, we cannot capture the attack packet on PC.
![note](/storage/images/Document/Maipu/note-icon.jpg)
-
The detection function of intercepting the attack with the same source and destination IP address is valid for the packets processed by CPU and the service packets.
- When the detection function of intercepting the attack with the same source and destination IP address drops the packet, do not generate the log or statistics information.