# Configuring the Zone-based Defense Policy (anti-DDoS)

After basic policies are configured, a basic attack defense policy is automatically generated on the devices associated with the Zone. You need to configure the attack defense policy based on live network traffic.

#### Prerequisites

The defense mode of the Zone has been configured. For details, see Configuring a Defense Mode.

#### Procedure

1. Choose Defense > Policy Settings > Zone.
2. Click of the Zone.
3. On the Outbound Defense Policy tab, click in the Operation column of the default defense policy starting with basic.

   The name of the default defense policy consists of basic and the IP address of the associated device. For example, if the IP address of the device is 10.18.60.36, the name of the default defense policy is basic_10_18_60_36.

4. Configure defense policies for protocols.
5. (Optional) If a Zone is associated with multiple devices, you can click the Defense Policy tab and then click to copy a defense policy from one associated device to another.

- SYN Flood Attack Defense
  This section describes SYN flood attack defense.
- TCP Fragment Traffic Limiting
  This section describes TCP fragment traffic limiting.
- UDP Traffic Limiting
  This section describes UDP traffic limiting.
- UDP Fragment Rate Limiting
  This section describes UDP Fragment Rate Limiting
- ICMP Rate Limiting
  This section describes rate limiting for ICMP services.

Parent topic: Configuring the Zone-based Defense Policy

Copyright © Huawei Technologies Co., Ltd.