Configuring the Zone

Before you configure an AntiDDoS or AntiDDoS1820-N defense policy, add Zones to be protected by the AntiDDoS and AntiDDoS1820-N. The ATIC provides refined and differentiated filtering and protection for different Zones.

Choose Defense > Policy Settings > Zone, and manage Zones.

Create	Click to add a Zone. For details, see Adding a Zone.
Modify	Click of the Zone to be modified, and modify the Zone. For the parameter description, see Adding a Zone.
Delete	NOTICE: Once the Zone is deleted, all the services, policies, packet-capturing tasks, diversion tasks, and baseline-learning tasks under the Zone will be deleted, and the Zone will be undeployed from all associated devices. Perform this operation with caution. Select the check boxes of multiple Zone accounts and click above the list to delete the selected collectors. Select the check box on the title bar and click above the list to delete all Zones.
Export	NOTE: In the inbound defense policy, only the AntiDDoS supports this operation and the AntiDDoS1820-N does not. In the outbound defense policy, no device supports this operation. Select one or more Zones and click . On the Export Zone page, select Export content. The exported content includes the following Zone information: Basic information: indicates basic information on a Zone. IP address: indicates the IP address, IP address segment, and mask of a Zone. Defense mode: indicates the defense mode of a Zone. Filter: indicates information on the filter associated with a Zone, excluding the rules of the filter. Defense policy: indicates the defense policy configured for a Zone. Location: indicates information about IP location associated with a Zone, excluding location rules. Blacklist: indicates the untrusted IP addresses for a Zone. Whitelist: indicates the trusted IP addresses for a Zone. Select Select device to select the AntiDDoS to be exported.
Export All	NOTE: In the inbound defense policy, only the AntiDDoS supports this operation and the AntiDDoS1820-N does not. In the outbound defense policy, no device supports this operation. Click . On the Export Zone page, select Export content. The exported content includes the following Zone information: Basic information: indicates basic information on a Zone. IP address: indicates the IP address, IP address segment, and mask of a Zone. Defense mode: indicates the defense mode of a Zone. Filter: indicates information on the filter associated with a Zone, excluding the rules of the filter. Defense policy: indicates the defense policy configured for a Zone. Location: indicates information about IP location associated with a Zone, excluding location rules. Blacklist: indicates the untrusted IP addresses for a Zone. Whitelist: indicates the trusted IP addresses for a Zone. Select Select device to select the AntiDDoS to be exported.
Import	NOTE: In the inbound defense policy, only the AntiDDoS supports this operation and the AntiDDoS1820-N does not. In the outbound defense policy, no device supports this operation. Click to import defense policies in batches. The import dimensions are the same as the export dimensions. NOTE: The imported file must be an XML file exported from the ATIC. You can change the values of elements in the file, but cannot change the file structure.
View	Click the account or name of the Zone to be viewed for its basic information and IP address. Click Close to close the dialog box.
Search	Basic search On the upper right of the page, enter the account/name of the Zone to be searched for and click . The Zone that meets search criteria is displayed on the page. Advanced search Click Advanced Search. In the advanced search area that is displayed, set search criteria such as Account/Name, Type, or IP Address, and then click Search.
VPN configuration	NOTE: The AntiDDoS1820-N does not support VPN configuration. Click in the operation column of the default Zone. Click the Include tab and synchronize the VPN route of the default Zone IP address for creating traffic diversion tasks. Click the Exclude tab and manually set the IP address and VPN name to exclude the VPN route. NOTICE: A maximum of 20,000 VPN routes can be synchronized from the ATIC to the AntiDDoS. If the synchronized VPN routes exceed 20,000, screen-length screen-length on the AntiDDoS is set to 0, and SSH is used for AntiDDoS and ATIC login, VPN route synchronization fails. Therefore, set screen-length to a value that is not 0. The AntiDDoS1820-N does not support the VPN configuration.