When Eth-Trunk is deployed for the heartbeat links between firewalls, the Eth-Trunk interface can be
configured as a Layer 2 interface as long as the total bandwidth of active links on the Eth-Trunk is
greater than 30% of the bandwidth required by service traffic.
Before configuring DDoS attack defense, you must configure different thresholds for defense against
different types of attacks. Each threshold can be considered an upper limit for normal network traffic.
When the rate of traffic exceeds the pre-configured threshold, the firewall considers it to be attack
traffic and takes a corresponding action to defend against it.