#cpu-defend policy d03
auto-defend enable
auto-defend attack-packet sample 10
auto-defend threshold 64
auto-defend alarm enable
auto-defend alarm threshold 64
auto-defend trace-type source-mac source-ip source-portvlan
auto-defend protocol all
auto-defend action error-down
auto-defend whitelist 1 interface GigabitEthernet0/0/22
auto-defend whitelist 2 interface GigabitEthernet0/0/23
#cpu-defend-policy d03 global
原文：http://webjin.blog.51cto.com/722625/1671177