H3C MSR Series

815
network-operator
Parameters
aspf-policy-number: Specifies the number of an ASPF policy. The value range for this argument is 1
to 256.
default: Specifies the predefined ASPF policy.
Examples
# Display the configuration of ASPF policy 1.
<Sysname> display aspf policy 1
ASPF policy configuration:
Policy number: 1
ICMP error message check: Disabled
TCP SYN packet check: Enabled
Inspected protocol Action
FTP Drop
HTTP None
RSH -
Table 121 Command output
Field
Description
ICMP error message check Whether ICMP error message check is enabled.
TCP SYN packet check Whether TCP SYN check is enabled.
Inspected protocol Protocols to be inspected by ASPF.
Action
Actions on the detected illegal packets:
• Drop—Drops illegal packets.
• Log—Generates log messages for illegal packets.
• None—Allows illegal packets to pass.
If the protocol does not support the action configuration, this
field displays a hyphen (-).
Related commands
aspf policy
display aspf session
Use display aspf session to display ASPF sessions.
Syntax
Centralized devices in standalone mode:
display aspf session [ ipv4 | ipv6 ] [ verbose ]
Distributed devices in standalone mode/centralized devices in IRF mode:
display aspf session [ ipv4 | ipv6 ] [ slot slot-number ] [ verbose ]
Distributed devices in IRF mode:
display aspf session [ ipv4 | ipv6 ] [ chassis chassis-number slot slot-number ] [ verbose ]
Views
Any view