.. _ddos_dst_entry_ip_proto:

ddos dst entry ip-proto
=======================

DDOS IP protocol configuration


ip-proto Specification
----------------------

	===================================== ============================================================================================
	 **Parameter**                         **Value** 

	===================================== ============================================================================================
	 **Type**                              *Collection*

	 **Object Key(s)**                     *port-num*

	 **Collection Name**                   :ref:`727_ip-proto_list`

	 **Collection URI**                    /axapi/v3/ddos/dst/entry/{dst-entry-name}/ip-proto

	                                       

	 **Element Name**                      ip-proto

	 **Element URI**                       /axapi/v3/ddos/dst/entry/{dst-entry-name}/ip-proto/{port-num}

	 **Element Attributes**                ip-proto_attributes

	 **Partition Visibility**              shared

	 **Statistics Data URI**               /axapi/v3/ddos/dst/entry/{dst-entry-name}/ip-proto/{port-num}/stats

	 **Operational Data URI**              /axapi/v3/ddos/dst/entry/{dst-entry-name}/ip-proto/{port-num}/oper

	 **Schema**                             :download:`ip-proto schema <ddos-dst-entry-ip-proto/ddos-dst-entry-ip-proto.txt>`
	===================================== ============================================================================================





	**Operations Allowed:**




.. raw:: html

   <script type="text/javascript">
 function showExample(a,b) { document.getElementById(a+'_div').style.display = 'block'; document.getElementById(a+'_cl').style.display = 'block'; document.getElementById(a+'_eg').style.display = 'none';}
   function closeExample(a,b) { document.getElementById(a+'_div').style.display = 'none'; document.getElementById(a+'_cl').style.display = 'none'; document.getElementById(a+'_eg').style.display = 'block';}
 </script>
   <table width='90%' style='margin-left:5%'>



.. raw:: html

   <tr style='border-bottom: thin solid; border-top: thin solid'><th width=15%>Operation</th><th width=10%>Method</th><th>URI</th><th width=15%>Payload</th><th width=10%></th></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Create Object



.. raw:: html

   </td><td valign = 'top'>


POST



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/ddos/dst/entry/{dst-entry-name}/ip-proto



.. raw:: html

   </td><td valign = 'top'>


:ref:`727_ip-proto_attributes`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Create List



.. raw:: html

   </td><td valign = 'top'>


POST



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/ddos/dst/entry/{dst-entry-name}/ip-proto



.. raw:: html

   </td><td valign = 'top'>


:ref:`727_ip-proto_attributes`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Get Object



.. raw:: html

   </td><td valign = 'top'>


GET



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/ddos/dst/entry/{dst-entry-name}/ip-proto/{port-num}



.. raw:: html

   </td><td valign = 'top'>


:ref:`727_ip-proto_attributes`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Get List



.. raw:: html

   </td><td valign = 'top'>


GET



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/ddos/dst/entry/{dst-entry-name}/ip-proto



.. raw:: html

   </td><td valign = 'top'>


:ref:`727_ip-proto_list`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Modify Object



.. raw:: html

   </td><td valign = 'top'>


POST



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/ddos/dst/entry/{dst-entry-name}/ip-proto/{port-num}



.. raw:: html

   </td><td valign = 'top'>


:ref:`727_ip-proto_attributes`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Replace Object



.. raw:: html

   </td><td valign = 'top'>


PUT



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/ddos/dst/entry/{dst-entry-name}/ip-proto/{port-num}



.. raw:: html

   </td><td valign = 'top'>


:ref:`727_ip-proto_attributes`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Replace List



.. raw:: html

   </td><td valign = 'top'>


PUT



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/ddos/dst/entry/{dst-entry-name}/ip-proto



.. raw:: html

   </td><td valign = 'top'>


:ref:`727_ip-proto_list`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Delete Object



.. raw:: html

   </td><td valign = 'top'>


DELETE



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/ddos/dst/entry/{dst-entry-name}/ip-proto/{port-num}



.. raw:: html

   </td><td valign = 'top'>


:ref:`727_ip-proto_attributes`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   </table>

.. _727_ip-proto_list:

ip-proto-list
-------------


    ip-proto-list is **JSON List** of :ref:`727_ip-proto_attributes` 

        ip-proto-list : [

             { :ref:`727_ip-proto_attributes` },

             { :ref:`727_ip-proto_attributes` },

             ...

         ]

.. _727_ip-proto_attributes:

ip-proto attributes
-------------------

    **deny**

        **Description** Blacklist and Drop all incoming packets for protocol

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **esp-inspect**

        **Description:** esp-inspect is a **JSON Block**.  Please see below for :ref:`727_esp-inspect` 

        **Type:** Object

    **glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **glid-exceed-action**

        **Description:** glid-exceed-action is a **JSON Block**.  Please see below for :ref:`727_glid-exceed-action` 

        **Type:** Object

    **ip-filtering-policy**

        **Description** Configure IP Filter

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/ip-filtering-policy <ddos_ip_filtering_policy>`

    **ip-filtering-policy-oper**

        **Description:** ip-filtering-policy-oper is a **JSON Block**.  Please see below for :ref:`727_ip-filtering-policy-oper` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/entry/{dst-entry-name}/ip-proto/{port-num}/ip-filtering-policy-oper <ddos_dst_entry>`

    **port-num**

        **Description** Protocol Number

        **Type:** number

        **Range:** 0-255

    **set-counter-base-val**

        **Description** Set T2 counter value of current context to specified value

        **Type:** number

        **Range:** 1-4294967295

    **template**

        **Description:** template is a **JSON Block**.  Please see below for :ref:`727_template` 

        **Type:** Object

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _727_esp-inspect:

esp-inspect
^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **auth-algorithm**

        **Description** 'AUTH_NULL': No Integrity Check Value; 'HMAC-SHA-1-96': 96 bit Auth Algo; 'HMAC-SHA-256-96': 96 bit Auth Algo; 'HMAC-SHA-256-128': 128 bit Auth Algo; 'HMAC-SHA-384-192': 192 bit Auth Algo; 'HMAC-SHA-512-256': 256 bit Auth Algo; 'HMAC-MD5-96': 96 bit Auth Algo; 'MAC-RIPEMD-160-96': 96 bit Auth Algo; 

        **Type:** string

        **Supported Values:** AUTH_NULL, HMAC-SHA-1-96, HMAC-SHA-256-96, HMAC-SHA-256-128, HMAC-SHA-384-192, HMAC-SHA-512-256, HMAC-MD5-96, MAC-RIPEMD-160-96

    **encrypt-algorithm**

        **Description** 'NULL': Null Encryption Algorithm; 

        **Type:** string

        **Supported Values:** NULL

    **mode**

        **Description** 'transport': Transport mode; 

        **Type:** string

        **Supported Values:** transport

.. _727_template:

template
^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **other**

        **Description** DDOS other template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

.. _727_glid-exceed-action:

glid-exceed-action
^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **stateless-encap-action-cfg**

        **Description:** stateless-encap-action-cfg is a **JSON Block**.  Please see below for :ref:`727_glid-exceed-action_stateless-encap-action-cfg` 

        **Type:** Object

.. _727_glid-exceed-action_stateless-encap-action-cfg:

glid-exceed-action_stateless-encap-action-cfg
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **encap-template**

        **Description** Apply legacy encap template for encap action

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/template/encap <ddos_template_encap>`

    **stateless-encap-action**

        **Description** 'stateless-tunnel-encap': Encapsulate all packets; 'stateless-tunnel-encap-scrubbed': Encapsulate all packets and allow packets to go through other DDoS checks before sent (conn-limit exceeded packet can not be scrubbed, it will default to stateless-tunnel-encap); 

        **Type:** string

        **Supported Values:** stateless-tunnel-encap, stateless-tunnel-encap-scrubbed

.. _727_ip-filtering-policy-oper:

ip-filtering-policy-oper
^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters