Use the drop-faf command to enable or disable dropping frames in a controlled manner during a flood attack. The drop-faf command is accessible from the mitigator:scprof:<named scan profile> context and the mitigator:gsprof:<named guardian scan profile> context of the CLI.
After you run the drop-faf command, run the apply command to implement the change.
enable | Enables dropping of frames during a flood attack |
disable | Disables dropping of frames, even during a flood attack |
The following example enables frame dropping:
EWC.extremenetworks.com:mitigator:scprof:scp_name# drop-faf enable EWC.extremenetworks.com:mitigator:scprof:scp_name# apply