# Decapsulating a Blackhole Policy

The blackhole policy can be decapsulated automatically and manually.

#### Procedure

- Automatically decapsulating a blackhole policy
  DamDDoS blackhole (third-party)
  1. Choose Defense > Policy Configuration > Blackhole.
  2. On the Blackhole page, click .
  3. In the Configure Blackhole API dialog box, set Scheduled unblocking time (time when the blackhole policy is decapsulated after the blackhole occurs). Set this parameter based on service requirements.

  4. Click OK.
  Non-DamDDoS blackhole (third-party)

  The Non-DamDDoS blackhole policy can be decapsulated through the third-party system. To use the third-party system, configure parameters on the third-party system and set Receiving Black Hole Message URL Configure on the ATIC.

  1. Choose System > Notification Server > RESTful Server.
  2. In the RESTful Server area, click .
  3. Set Receiving Black Hole Message URL Configure.

  4. Click OK.
  5. Choose System > Data Maintenance > Service Data Maintenance.
  6. Click Modify and set Blackhole Duration(Minutes). Table 1 lists related parameters.

     Table 1 Blackhole parameter configuration
     Parameter | Description
     --- | ---
     Blackhole Duration(Minutes) | By default, the decapsulation time is 30 minutes. The value is in the range from 2 to 600, in minutes.

  7. Click OK.

- Manually decapsulating a blackhole policy

  The dynamic and static blackhole policies can be decapsulated manually.

  1. Choose Defense > Policy Settings > Blackhole.
  2. Select the blackhole policy to be deleted and click Disable.

     1. You can click Enable to re-enable the disabled blackhole policy.
     2. You can also select the blackhole policy to be deleted and click Delete. The deleted blackhole policy cannot be re-enabled.

Parent topic: Triggering a Blackhole Policy for the Third-Party System Through the RESTful API

Copyright © Huawei Technologies Co., Ltd.