firewall ddos bgp-next-hop

Function

Using the firewall ddos bgp-next-hop command, you can specify the next hop IP address used when routes are dynamically generated.

Using the undo firewall ddos bgp-next-hop command, you can cancel the next hop IP address used when routes are dynamically generated.

Format

firewall ddos bgp-next-hop { ip-address | ipv6 ipv6-address }

undo firewall ddos bgp-next-hop [ipv6 ]

Parameters

Parameter	Description	Value
ip-address	Specifies the IP address.	It is in dotted decimal notation.
ipv6-address	Specifies an IPv6 address.	The value is in colon hexadecimal notation.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Parameter ip-address specifies the next hop IP address of the interface for injection on the cleaning device. That is, the IP address of the interface (that is directly connected to the interface for injection on the cleaning device) on the access routing device. Parameter ip-address cannot be the IP address of the interface on the cleaning device.

The cleaning device supports the setting of only one next hop IP address. If you run the command for several times, the newly specified IP address overwrites the existing one.

Example

# Set the next hop IP address used when routes are dynamically generated to 10.1.1.1.

<sysname> system-view
[sysname] firewall ddos bgp-next-hop 10.1.1.1