DDoS IS-IS classification

Junos OS classifies IS-IS hello packets and IS-IS data packets separately. You can apply different policers to different types of IS-IS packets to improve the performance of IS-IS during congestion so that IS-IS doesn't go down when a large number of packets are entering the device. Configure DDoS protection settings for IS-IS hello packets and IS-IS data packets separately using the isis-hello or isis-data statement at the [edit system ddos-protection protocols isis] hierarchy level. Use the show ddos-protection protocols isis parameters brief command to view the aggregate number of IS-IS packets as well as the number of IS-IS hello packets and IS-IS data packets.