Context
There are three actions for blackholes triggered by alarm policies: Enable blackhole, Enable LPU blackhole, and Enable blackhole API. If the first reported attack alarm is not of the critical severity, the corresponding blackhole action can be taken only when the alarm severity is updated to critical. The alarm severity update takes at least 64 seconds.
Procedure
- Configure a blackhole triggered by alarm policies.
- Click
. - In the Alarm Policy dialog box,
select a blackhole action. For parameter description, see Table 1.
Table 1 Action Parameter Description Enable blackhole
If Enable blackhole is selected, the blackhole route is enabled if the value of a parameter in Critical exceeds the configured threshold.
NOTE:The upstream router and the BGP peer between the upstream router and anti-DDoS device must be configured in advance.Enable LPU blackhole
If Enable LPU blackhole is selected, the LPU blackhole is enabled if the value of a parameter in Critical exceeds the configured threshold.
NOTE:Only the AntiDDoS8000 that have the LPU240 or LPU120 installed support this mode.
Enable blackhole API
If Enable blackhole API is selected, the blackhole API is enabled if the value of a parameter in Critical exceeds the configured threshold.
NOTE:The third-party information must be configured on the ATIC before Enable blackhole API is selected. For detailed configuration methods, see Configure Blackhole API.
Only the blackhole API provided by DamDDoS (China Telecom) is supported as the third-party API.
- Click