security debug matcher

security debug matcher(1)				BIG-IP TMSH Manual				 security debug matcher(1)

NAME
       debug - Configures Debuggability drop redirect mode.

MODULE
       security firewall

SYNTAX
       Configure drop redirect feature or display stats using the following syntax.

   MODIFY
	modify debug
	  matcher {
	   drop-redirect {
	     drop-redirect-mode {
		 disable
		 redirect-all
		 redirect-hw-only
		 redirect-sw-only
	      }
	    }
	  }

   DISPLAY
	show debug
	  drop-redirect-stats

DESCRIPTION
       Debuggability drop redirection feature redirects HW dropped packets to a specified interface. This interface may be set
       using sys db variable debug.hwdropredirect.interface. The feature can also redirect only certain types of drops. This can
       be done by using sys db variable debug.doshwdropredirect.disables.

       Full List of HW Redirect Modes # Disable GlobalDoSVector drop redirects	    bit-0 # Disable sPVADoSVector drop redirects
       bit-1 # Disable sPVAIPBlacklist drop redirects	   bit-2 # Disable sPVAIPRateLimit drop redirects      bit-3 # Disable
       NeuronBlacklist drop redirects	   bit-4 # Disable DuplicateSYN drop redirects	       bit-5

       Once an interface is set-up, redirect-hw-only mode can be enabled as the following example.

EXAMPLES
       modify security debug matcher drop-redirect drop-redirect-mode redirect-hw-only

       Configures dropped packets to be redirected to a specified interface.

BIG-IP							    2018-01-10					 security debug matcher(1)