To Next Page

H3C MSR Router Series

Comware 7 Security Command Reference

New H3C Technologies Co., Ltd.

http://www.h3c.com.hk

Software version: MSR-CMW710-R0605

Document version: 6W200-20170608

Default Chapter5
- Documentation Feedback5
- Obtaining Documentation5
- Technical Support5
- Table of Contents6
AAA Commands24
- General AAA Commands24
- Local User Commands76
- RADIUS Commands109
- HWTACACS Commands143
- LDAP Commands163
802.1X Commands177
- Display Dot1X177
- Display Dot1X Connection182
- Dot1X187
- Dot1X Authentication-Method187
- Dot1X Auth-Fail Vlan188
- Dot1X Critical Vlan189
- Dot1X Domain-Delimiter190
- Dot1X Ead-Assistant Enable191
- Dot1X Ead-Assistant Free-Ip192
- Dot1X Ead-Assistant Url193
- Dot1X Guest-Vlan194
- Dot1X Handshake195
- Dot1X Handshake Reply Enable195
- Dot1X Handshake Secure196
- Dot1X Mandatory-Domain197
- Dot1X Max-User197
- Dot1X Multicast-Trigger198
- Dot1X Port-Control199
- Dot1X Port-Method200
- Dot1X Quiet-Period200
- Dot1X Re-Authenticate201
- Dot1X Re-Authenticate Server-Unreachable Keep-Online202
- Dot1X Retry202
- Dot1X Smarton203
- Dot1X Smarton Password204
- Dot1X Smarton Retry205
- Dot1X Smarton Switchid206
- Dot1X Smarton Timer Supp-Timeout206
- Dot1X Timer207
- Dot1X Unicast-Trigger209
- Reset Dot1X Guest-Vlan210
- Reset Dot1X Statistics210
MAC Authentication Commands212
- Display Mac-Authentication212
- Display Mac-Authentication Connection216
- Mac-Authentication220
- Mac-Authentication Domain221
- Mac-Authentication Host-Mode221
- Mac-Authentication Max-User222
- Mac-Authentication Re-Authenticate Server-Unreachable Keep-Online223
- Mac-Authentication Timer224
- Mac-Authentication Timer Auth-Delay225
- Mac-Authentication User-Name-Format225
- Reset Mac-Authentication Statistics227
Port Security Commands228
- Display Port-Security228
- Display Port-Security Mac-Address Block231
- Display Port-Security Mac-Address Security235
- Port-Security Authorization Ignore236
- Port-Security Authorization-Fail Offline237
- Port-Security Enable238
- Port-Security Intrusion-Mode238
- Port-Security Mac-Address Aging-Type Inactivity239
- Port-Security Mac-Address Dynamic240
- Port-Security Mac-Address Security241
- Port-Security Mac-Move Permit242
- Port-Security Max-Mac-Count243
- Port-Security Nas-ID-Profile244
- Port-Security Ntk-Mode245
- Port-Security Oui246
- Port-Security Port-Mode247
- Port-Security Timer Autolearn Aging249
- Port-Security Timer Disableport250
- Snmp-Agent Trap Enable Port-Security251
Portal Commands253
- Aaa-Fail Nobinding Enable253
- Aging-Time254
- App-ID255
- App-Key256
- Authentication-Timeout257
- Auth-Url257
- Binding-Retry258
- Captive-Bypass Enable259
- Cloud-Binding Enable260
- Cloud-Server Url261
- Default-Logon-Page262
- Display Portal262
- Display Portal Auth-Error-Record269
- Display Portal Auth-Fail-Record272
- Display Portal Captive-Bypass Statistics275
- Display Portal Extend-Auth-Server276
- Display Portal Local-Binding Mac-Address277
- Display Portal Logout-Record278
- Display Portal Mac-Trigger-Server280
- Display Portal Packet Statistics283
- Display Portal Redirect Statistics288
- Display Portal Rule289
- Display Portal Safe-Redirect Statistics300
- Display Portal Server302
- Display Portal User303
- Display Portal User Count317
- Display Portal Web-Server318
- Display Web-Redirect Rule319
- Exclude-Attribute (MAC Binding Server View)322
- Exclude-Attribute (Portal Authentication Server View)324
- Free-Traffic Threshold325
- If-Match326
- If-Match Temp-Pass328
- Ip (MAC Binding Server View)330
- Ip (Portal Authentication Server View)331
- Ipv6332
- Local-Binding Aging-Time333
- Local-Binding Enable333
- Logon-Page Bind334
- Logout-Notify336
- Mail-Domain-Name337
- Mail-Protocol337
- Nas-Port-Type338
- Port (MAC Binding Server View)339
- Port (Portal Authentication Server View)340
- Portal { Bas-Ip | Bas-Ipv6340
- Portal { Ipv4-Max-User | Ipv6-Max-User341
- Portal Apply Mac-Trigger-Server342
- Portal Apply Web-Server343
- Portal Auth-Error-Record Enable344
- Portal Auth-Error-Record Export345
- Portal Auth-Error-Record Max347
- Portal Auth-Fail-Record Enable348
- Portal Auth-Fail-Record Export348
- Portal Auth-Fail-Record Max350
- Portal Authorization Strict-Checking351
- Portal Captive-Bypass Optimize Delay352
- Portal Client-Gateway Interface353
- Portal Client-Traffic-Report Interval353
- Portal Delete-User354
- Portal Device-ID356
- Portal Domain356
- Portal Dual-Stack Enable357
- Portal Dual-Stack Traffic-Separate Enable358
- Portal Enable359
- Portal Extend-Auth Domain361
- Portal Extend-Auth-Server361
- Portal Fail-Permit Server362
- Portal Fail-Permit Web-Server363
- Portal Free-All Except Destination364
- Portal Free-Rule365
- Portal Free-Rule Description367
- Portal Free-Rule Destination368
- Portal Free-Rule Source369
- Portal Host-Check Enable370
- Portal Ipv6 Free-All Except Destination371
- Portal Ipv6 Layer3 Source372
- Portal Ipv6 User-Detect373
- Portal Layer3 Source374
- Portal Local-Web-Server375
- Portal Logout-Record Enable376
  - Portal Logout-Record Export377
  - Portal Logout-Record Max379
  - Portal Mac-Trigger-Server380
  - Portal Max-User380
  - Portal Nas-ID Profile381
  - Portal Nas-Port-ID Format382
  - Portal Nas-Port-Type384
  - Portal Outbound-Filter Enable386
  - Portal Pre-Auth Domain386
  - Portal Packet Log Enable388
  - Portal Pre-Auth Ip-Pool388
  - Portal Redirect Log Enable389
  - Portal Refresh Enable390
  - Portal Roaming Enable391
  - Portal Safe-Redirect Enable391
  - Portal Safe-Redirect Forbidden-File392
  - Portal Safe-Redirect Forbidden-Url393
  - Portal Safe-Redirect Method393
  - Portal Safe-Redirect User-Agent394
  - Portal Server395
  - Portal Temp-Pass Enable396
  - Portal Traffic-Accounting Disable397
  - Portal User-Detect398
  - Portal User-Dhcp-Only399
  - Portal User-Logoff After-Client-Offline Enable400
  - Portal User Log Enable401
  - Portal Web-Server401
  - Redirect-Url402
  - Reset Portal Auth-Error-Record403
  - Reset Portal Auth-Fail-Record404
  - Reset Portal Captive-Bypass Statistics405
  - Reset Portal Logout-Record406
  - Reset Portal Packet Statistics407
  - Reset Portal Redirect Statistics408
  - Reset Portal Safe-Redirect Statistics408
  - Server-Detect (Portal Authentication Server View)409
  - Server-Detect (Portal Web Server View)410
  - Server-Register411
  - Server-Type (MAC Binding Server View)412
  - Server-Type(Portal Server View/Portal Web Server View)412
  - Tcp-Port413
  - Url414
  - Url-Parameter415
  - User-Password Modify Enable417
  - User-Sync418
  - Version419
  - Vpn-Instance419
  - Web-Redirect Track420
  - Web-Redirect Url421
User Profile Commands423
- Display User-Profile423
- User-Profile428
Password Control Commands429
- Display Password-Control429
- Display Password-Control Blacklist430
- Password-Control { Aging | Composition | History | Length } Enable431
- Password-Control Aging432
- Password-Control Alert-Before-Expire434
- Password-Control Complexity434
- Password-Control Composition435
- Password-Control Enable437
- Password-Control Expired-User-Login438
- Password-Control History439
- Password-Control Length440
- Password-Control Login Idle-Time441
- Password-Control Login-Attempt442
- Password-Control Super Aging444
- Password-Control Super Composition444
- Password-Control Super Length445
- Password-Control Update-Interval446
- Reset Password-Control Blacklist447
- Reset Password-Control History-Record447
Keychain Commands449
- Accept-Lifetime Utc449
- Authentication-Algorithm450
- Display Keychain450
- Key452
- Keychain452
- Key-String453
- Send-Lifetime Utc454
Public Key Management Commands456
- Display Public-Key Local Public456
- Display Public-Key Peer459
- Peer-Public-Key End461
- Public-Key Local Create462
- Public-Key Local Destroy465
- Public-Key Local Export Dsa466
- Public-Key Local Export Ecdsa468
- Public-Key Local Export Rsa470
- Public-Key Peer472
- Public-Key Peer Import Sshkey472
PKI Commands474
- Attribute474
- Ca Identifier475
- Certificate Request Entity476
- Certificate Request from477
- Certificate Request Mode477
- Certificate Request Polling479
- Certificate Request Url480
- Common-Name481
- Country481
- Crl Check482
- Crl Url482
- Display Pki Certificate Access-Control-Policy483
- Display Pki Certificate Attribute-Group484
- Display Pki Certificate Domain485
- Display Pki Certificate Renew-Status490
- Display Pki Certificate Request-Status491
- Display Pki Crl Domain493
- Fqdn495
- Ldap-Server496
- Locality497
- Organization497
- Organization-Unit498
- Pki Abort-Certificate-Request499
- Pki Certificate Access-Control-Policy499
- Pki Certificate Attribute-Group500
- Pki Delete-Certificate501
- Pki Domain502
- Pki Entity503
- Pki Export504
- Pki Import511
- Pki Request-Certificate515
- Pki Retrieve-Certificate516
- Pki Retrieve-Crl517
- Pki Storage518
- Pki Validate-Certificate519
- Public-Key Dsa521
- Public-Key Ecdsa522
- Public-Key Rsa524
- Root-Certificate Fingerprint525
- Rule526
- Source527
- State528
- Subject-Dn529
- Usage530
- Vpn-Instance531
Ipsec Commands532
- Ah Authentication-Algorithm532
- Description533
- Display Ipsec { Ipv6-Policy | Policy534
- Display Ipsec { Ipv6-Policy-Template | Policy-Template539
- Display Ipsec Profile541
- Display Ipsec Sa542
- Display Ipsec Statistics546
- Display Ipsec Transform-Set548
- Display Ipsec Tunnel549
- Encapsulation-Mode552
- Esn Enable553
- Esp Authentication-Algorithm553
- Esp Encryption-Algorithm555
- Ike-Profile557
- Ikev2-Profile558
- Ipsec Anti-Replay Check559
- Ipsec Anti-Replay Window559
- Ipsec Apply560
- Ipsec Decrypt-Check Enable561
- Ipsec Df-Bit561
- Ipsec Fragmentation562
- Ipsec Global-Df-Bit563
- Ipsec Limit Max-Tunnel564
- Ipsec Logging Negotiation Enable564
- Ipsec Logging Packet Enable565
- Ipsec { Ipv6-Policy | Policy565
- Ipsec { Ipv6-Policy | Policy } Isakmp Template567
- Ipsec { Ipv6-Policy | Policy } Local-Address567
- Ipsec { Ipv6-Policy-Template | Policy-Template568
- Ipsec Profile569
- Ipsec Redundancy Enable570
- Ipsec Sa Global-Duration571
- Ipsec Sa Idle-Time572
- Ipsec Transform-Set573
- Local-Address573
- Pfs574
- Protocol575
- Qos Pre-Classify576
- Redundancy Replay-Interval576
- Remote-Address577
- Reset Ipsec Sa579
- Reset Ipsec Statistics580
- Reverse-Route Dynamic580
- Reverse-Route Preference582
- Reverse-Route Tag582
- Sa Duration583
- Sa Hex-Key Authentication584
- Sa Hex-Key Encryption585
- Sa Idle-Time587
- Sa Spi588
- Sa String-Key589
- Security Acl590
- Snmp-Agent Trap Enable Ipsec591
- Tfc Enable592
- Transform-Set593
- Tunnel Protection Ipsec594
IKE Commands596
- Aaa Authorization596
- Authentication-Algorithm597
- Authentication-Method598
- Certificate Domain599
- Client-Authentication600
- Description601
- Display Ike Proposal602
- Display Ike Sa603
- Display Ike Statistics607
- Dpd608
- Encryption-Algorithm608
- Exchange-Mode610
- Ike Address-Group611
- Ike Dpd612
- Ike Identity613
- Ike Invalid-Spi-Recovery Enable614
- Ike Keepalive Interval614
- Ike Keepalive Timeout615
- Ike Keychain616
- Ike Limit617
- Ike Logging Negotiation Enable617
- Ike Nat-Keepalive618
- Ike Profile618
- Ike Proposal619
- Ike Signature-Identity From-Certificate620
- Inside-Vpn621
- Keychain621
- Local-Identity622
- Match Local Address (IKE Keychain View)623
- Match Local Address (IKE Profile View)624
- Match Remote625
- Pre-Shared-Key626
- Priority (IKE Keychain View)628
- Priority (IKE Profile View)628
- Proposal629
- Reset Ike Sa630
- Reset Ike Statistics630
- Sa Duration631
- Snmp-Agent Trap Enable Ike631
Ikev2 Commands634
- Aaa Authorization634
- Address635
- Authentication-Method635
- Certificate Domain637
- Config-Exchange638
- Display Ikev2 Policy639
- Display Ikev2 Profile640
- Display Ikev2 Proposal641
- Display Ikev2 Sa642
- Display Ikev2 Statistics646
- Dpd648
- Encryption649
- Hostname650
- Identity651
- Identity Local652
- Ikev2 Address-Group653
- Ikev2 Cookie-Challenge653
- Ikev2 Dpd654
- Ikev2 Ipv6-Address-Group655
- Ikev2 Keychain656
- Ikev2 Nat-Keepalive656
- Ikev2 Policy657
- Ikev2 Profile658
- Ikev2 Proposal659
- Inside-Vrf660
- Integrity661
- Keychain661
- Match Local (Ikev2 Profile View)662
- Match Local Address (Ikev2 Policy View)663
- Match Remote664
- Match Vrf (Ikev2 Policy View)665
- Match Vrf (Ikev2 Profile View)666
- Nat-Keepalive667
- Peer668
- Pre-Shared-Key668
- Prf670
- Priority (Ikev2 Policy View)671
- Priority (Ikev2 Profile View)672
- Proposal672
- Reset Ikev2 Sa673
- Reset Ikev2 Statistics674
- Sa Duration674
Group Domain VPN Commands676
- Client Anti-Replay Window676
- Client Registration677
- Client Rekey Encryption678
- Client Transform-Sets679
- Display Gdoi Gm679
- Display Gdoi Gm Acl684
- Display Gdoi Gm Anti-Replay685
- Display Gdoi Gm Ipsec Sa686
- Display Gdoi Gm Members687
- Display Gdoi Gm Pubkey688
- Display Gdoi Gm Rekey689
- Gdoi Gm Group690
- Group691
- Identity692
- Reset Gdoi Gm692
- Server Address693
SSH Commands695
- SSH Server Commands695
- SSH Client Commands715
- SSH2 Commands740
SSL Commands745
- Certificate-Chain-Sending Enable745
- Ciphersuite746
- Client-Verify747
- Display Ssl Client-Policy748
- Display Ssl Server-Policy749
- Pki-Domain750
- Prefer-Cipher751
- Server-Verify Enable752
- Session753
- Ssl Client-Policy754
- Ssl Renegotiation Disable754
- Ssl Server-Policy755
- Ssl Version Ssl3.0 Disable756
- Version756
SSL VPN Commands758
- Aaa Domain758
- Bandwidth759
- Certificate-Authentication Enable759
- Content-Type760
- Default761
- Default-Policy-Group761
- Description (Shortcut View)762
- Description (SSL VPN AC Interface View)763
- Display Interface Sslvpn-Ac763
- Display Sslvpn Context766
- Display Sslvpn Gateway768
- Display Sslvpn Policy-Group770
- Display Sslvpn Port-Forward Connection771
- Display Sslvpn Session773
- Dynamic-Password Enable775
- Emo-Server775
- Exclude776
- Execution (Port Forwarding Item View)777
- Execution (Shortcut View)778
- File-Policy778
- Filter Ip-Tunnel Acl779
- Filter Ip-Tunnel Uri-Acl780
- Filter Tcp-Access Acl781
- Filter Tcp-Access Uri-Acl782
- Filter Web-Access Acl783
- Filter Web-Access Uri-Acl784
- Force-Logout785
- Force-Logout Max-Onlines Enable786
- Gateway786
- Heading787
- Http-Redirect788
- Include789
- Interface Sslvpn-Ac790
- Ip Address790
- Ip-Route-List791
- Ip-Tunnel Access-Route792
- Ip-Tunnel Address-Pool793
- Ip-Tunnel Dns-Server793
- Ip-Tunnel Interface794
- Ip-Tunnel Keepalive795
- Ip-Tunnel Wins-Server795
- Ipv6 Address796
- Local-Port797
- Log Resource-Access Enable798
- Log Enable User-Log799
- Log Resource-Access Enable799
- Log User-Login Enable800
- Login-Message800
- Logo801
- Max-Onlines802
- Max-Users802
- Message-Server803
- Mtu804
- New-Content804
- Old-Content805
- Policy-Group806
- Port-Forward806
- Port-Forward-Item807
- Reset Counters Interface Sslvpn-Ac808
- Resources Port-Forward809
- Resources Port-Forward-Item809
- Resources Shortcut810
- Resources Shortcut-List811
- Resources Url-List812
- Rewrite-Rule812
- Rule813
- Service Enable (SSL VPN Context View)815
- Service Enable (SSL VPN Gateway View)815
- Session-Connections816
- Shortcut816
- Shortcut-List817
- Shutdown817
- Sms-IMC Address818
- Sms-IMC Enable818
- Ssl Client-Policy819
- Ssl Server-Policy820
- Sslvpn Context821
- Sslvpn Gateway822
- Sslvpn Ip Address-Pool822
- Timeout Idle823
- Title824
- Uri-Acl824
- Url (File Policy View)825
- Url (URL List View)826
- Url-List827
- Verify-Code828
- Vpn-Instance (SSL VPN Context View)828
- Vpn-Instance (SSL VPN Gateway View)829
ASPF Commands831
- Aspf Apply Policy (Interface View)831
- Aspf Apply Policy (Zone Pair View)832
- Aspf Icmp-Error Reply833
- Aspf Policy833
- Detect834
- Display Aspf All836
- Display Aspf Interface837
- Display Aspf Policy837
- Display Aspf Session838
- Icmp-Error Drop844
- Reset Aspf Session845
- Tcp Syn-Check846
APR Commands847
- App-Group847
- Application Statistics Enable848
- Apr Set Detectlen849
- Apr Signature Auto-Update850
- Apr Signature Auto-Update-Now851
- Apr Signature Rollback852
- Apr Signature Update852
- Copy App-Group855
- Description (Application Group View)856
- Description (NBAR Rule View)856
- Destination857
- Direction858
- Disable859
- Display App-Group860
- Display Application862
- Display Application Statistics865
- Display Application Statistics Top868
- Display Apr Signature Information870
- Display Port-Mapping Pre-Defined871
- Display Port-Mapping User-Defined872
- Include Application873
- Nbar Application874
- Override-Current875
- Port-Mapping876
- Port-Mapping Acl877
- Port-Mapping Host878
- Port-Mapping Subnet880
- Reset Application Statistics881
- Service-Port882
- Signature883
- Source884
- Update Schedule885
Session Management Commands888
- Display Session Aging-Time Application888
- Display Session Aging-Time State889
- Display Session Relation-Table890
- Display Session Statistics Ipv4893
- Display Session Statistics Ipv6895
- Display Session Statistics896
- Display Session Statistics Multicast900
- Display Session Table Ipv4901
- Display Session Table Ipv6906
- Display Session Table Multicast Ipv4910
- Display Session Table Multicast Ipv6916
- Reset Session Relation-Table923
- Reset Session Statistics924
- Reset Session Statistics Multicast925
- Reset Session Table925
- Reset Session Table Ipv4926
- Reset Session Table Ipv6927
- Reset Session Table Multicast928
- Reset Session Table Multicast Ipv4929
- Reset Session Table Multicast Ipv6930
- Session Aging-Time Application932
- Session Aging-Time State934
- Session Log { Bytes-Active | Packets-Active935
- Session Log Enable936
- Session Log Flow-Begin937
- Session Log Flow-End938
- Session Log Time-Active938
- Session Persistent Acl939
- Session State-Machine Mode Loose940
- Session Statistics Enable941
Connection Limit Commands942
- Connection-Limit942
- Connection-Limit Apply943
- Connection-Limit Apply Global944
- Description944
- Display Connection-Limit945
- Display Connection-Limit Ipv6-Stat-Nodes948
- Display Connection-Limit Statistics952
- Display Connection-Limit Stat-Nodes953
- Limit958
- Reset Connection-Limit Statistics961
Object Group Commands963
- Description963
- Display Object-Group964
- Network (Ipv4 Address Object Group View)965
- Network (Ipv6 Address Object Group View)967
- Network Exclude969
- Object-Group970
- Object-Group Rename971
- Port (Port Object Group View)972
- Service (Service Object Group View)974
Object Policy Commands976
- Accelerate976
- Description977
- Display Object-Policy Accelerate978
- Display Object-Policy Ip979
- Display Object-Policy Ipv6980
- Display Object-Policy Statistics Zone-Pair Security981
- Display Object-Policy Zone-Pair Security982
- Move Rule983
- Object-Policy Apply Ip983
- Object-Policy Apply Ipv6984
- Object-Policy Ip985
- Object-Policy Ipv6986
- Reset Object-Policy Statistics986
- Rule (Ipv4 Object Policy View)987
- Rule (Ipv6 Object Policy View)989
- Rule Append992
- Rule Comment993
Attack Detection and Prevention Commands995
- Ack-Flood Action995
- Ack-Flood Detect996
- Ack-Flood Detect Non-Specific997
- Ack-Flood Threshold998
- Attack-Defense Apply Policy998
- Attack-Defense Local Apply Policy999
- Attack-Defense Login Reauthentication-Delay1000
- Attack-Defense Policy1001
- Attack-Defense Signature Log Non-Aggregate1001
- Attack-Defense Top-Attack-Statistics Enable1002
- Blacklist Enable1003
- Blacklist Global Enable1003
- Blacklist Ip1004
- Blacklist Ipv61005
- Blacklist Logging Enable1006
- Blacklist Object-Group1007
- Client-Verify Dns Enable1008
- Client-Verify Http Enable1008
- Client-Verify Protected Ip1009
- Client-Verify Protected Ipv61010
- Client-Verify Tcp Enable1011
- Display Attack-Defense Flood Statistics Ip1012
- Display Attack-Defense Flood Statistics Ipv61015
- Display Attack-Defense Policy1018
- Display Attack-Defense Policy Ip1022
- Display Attack-Defense Policy Ipv61025
- Display Attack-Defense Scan Attacker Ip1028
- Display Attack-Defense Scan Attacker Ipv61030
- Display Attack-Defense Scan Victim Ip1032
- Display Attack-Defense Scan Victim Ipv61034
- Display Attack-Defense Statistics Interface1036
- Display Attack-Defense Statistics Local1042
- Display Attack-Defense Top-Attack-Statistics1047
- Display Blacklist Ip1049
- Display Blacklist Ipv61051
- Display Client-Verify Protected Ip1053
- Display Client-Verify Protected Ipv61058
- Display Client-Verify Trusted Ip1062
- Display Client-Verify Trusted Ipv61066
- Dns-Flood Action1070
- Dns-Flood Detect1070
- Dns-Flood Detect Non-Specific1072
- Dns-Flood Port1072
- Dns-Flood Threshold1073
- Exempt Acl1074
- Fin-Flood Action1075
- Fin-Flood Detect1076
- Fin-Flood Detect Non-Specific1077
- Fin-Flood Threshold1077
- Http-Flood Action1078
- Http-Flood Detect1079
- Http-Flood Detect Non-Specific1080
- Http-Flood Port1081
- Http-Flood Threshold1082
- Icmp-Flood Action1082
- Icmp-Flood Detect Ip1083
- Icmp-Flood Detect Non-Specific1084
- Icmp-Flood Threshold1085
- Icmpv6-Flood Action1086
- Icmpv6-Flood Detect Ipv61086
- Icmpv6-Flood Detect Non-Specific1087
- Icmpv6-Flood Threshold1088
- Reset Attack-Defense Policy Flood1089
- Reset Attack-Defense Statistics Interface1090
- Reset Attack-Defense Statistics Local1090
- Reset Attack-Defense Top-Attack-Statistics1090
- Reset Blacklist Ip1091
- Reset Blacklist Ipv61091
- Reset Blacklist Statistics1092
- Reset Client-Verify Protected Statistics1092
- Reset Client-Verify Trusted1093
- Rst-Flood Action1094
- Rst-Flood Detect1094
- Rst-Flood Detect Non-Specific1095
- Rst-Flood Threshold1096
- Scan Detect1097
- Signature { Large-Icmp | Large-Icmpv6 } Max-Length1098
- Signature Detect1099
- Signature Level Action1102
- Signature Level Detect1103
- Syn-Ack-Flood Action1104
- Syn-Ack-Flood Detect1104
- Syn-Ack-Flood Detect Non-Specific1106
- Syn-Ack-Flood Threshold1106
- Syn-Flood Action1107
- Syn-Flood Detect1108
- Syn-Flood Detect Non-Specific1109
  - Syn-Flood Threshold1110
  - Udp-Flood Action1110
  - Udp-Flood Detect1111
  - Udp-Flood Detect Non-Specific1112
  - Udp-Flood Threshold1113
  - Whitelist Enable1114
  - Whitelist Global Enable1114
  - Whitelist Object-Group1115
IP Source Guard Commands1117
- Display Ip Source Binding1118
- Display Ipv6 Source Binding1120
- Ip Source Binding (Interface View)1122
- Ip Verify Source1123
- Ipv6 Source Binding (Interface View)1124
- Ipv6 Verify Source1125
ARP Attack Protection Commands1127
- Unresolvable IP Attack Protection Commands1127
- Source MAC-Based ARP Attack Detection Commands1131
- ARP Packet Source MAC Consistency Check Commands1134
  - Arp Valid-Check Enable1134
- ARP Active Acknowledgement Commands1134
  - Arp Active-Ack Enable1134
- Authorized ARP Commands1135
  - Arp Authorized Enable1135
- ARP Attack Detection Commands1136
- ARP Scanning and Fixed ARP Commands1141
  - Arp Fixup1141
  - Arp Scan1142
- ARP Gateway Protection Commands1143
  - Arp Filter Source1143
- ARP Filtering Commands1144
  - Arp Filter Binding1144
Ipv4 Urpf Commands1146
- Display Ip Urpf1146
- Ip Urpf1147
Ipv6 Urpf Commands1149
- Display Ipv6 Urpf1149
- Ipv6 Urpf1150
Crypto Engine Commands1152
- Display Crypto-Engine1152
- Display Crypto-Engine Statistics1154
- Reset Crypto-Engine Statistics1157
FIPS Commands1159
- Display Fips Status1159
- Fips Mode Enable1159
- Fips Self-Test1161
Mgre Commands1165
- Display Mgre Session1165
- Display Nhrp Map1168
- Display Nhrp Statistics1170
- Nhrp Authentication1172
- Nhrp Holdtime1172
- Nhrp Network-ID1173
- Nhrp Nhs1174
- Reset Mgre Session1174
- Reset Mgre Statistics1175
- Reset Nhrp Statistics1176
Index1177

Other manuals for H3C MSR Series

Manual33 pages

Probe Command Reference28 pages

Configuration Guide80 pages

Troubleshooting Guide28 pages

User Guide26 pages

Questions and Answers:

Need help?

Do you have a question about the H3C MSR Series and is the answer not in the manual?

H3C MSR Series Specifications

General

Category	Network Router
IPv6 Support	Yes
Dimensions	Varies by model
Weight	Varies by model
Product Type	Modular Router
Ports	Varies by model
WAN Interfaces	Varies by model
Firewall	Yes
QoS	Yes
Wireless Support	Varies by model
USB Ports	Varies by model
Console Port	Yes
Power Supply	Varies by model
Redundancy	Varies by model
Operating Temperature	0°C to 45°C
Storage Temperature	-40°C to 70°C
Humidity	5% to 95% non-condensing
Series	MSR
Certifications	CE, FCC, RoHS