HPE FlexNetwork MSR Series Comware 5 Security Configuration Guide

342
Task Command Remarks
Display the packet filtering
statistics of the IPv4 firewall.
display firewall-statistics
{
all
|
fragments-inspect
|
interface
interface-type interface-number } [
|
{
begin
|
exclude
|
include
}
regular-expression ]
Available in any view.
Display the packet filtering
statistics of the IPv6 firewall.
display firewall ipv6 statistics
{
all
|
interface
interface-type
interface-number } [
|
{
begin
|
exclude
|
include
} regular-expression ]
Available in any view.
Clear the ACL-based firewall
statistics.
reset firewall ethernet-frame-filter
{
all
|
dlsw
|
interface
interface-type
interface-number }
Available in user view.
Clear the packet filtering statistics
of the IPv4 firewall.
reset firewall-statistics
{
all
|
interface
interface-type interface-number }
Available in user view.
Clear the packet filtering statistics
of the IPv6 firewall.
reset firewall ipv6 statistics
{
all
|
interface
interface-type
interface-number }
Available in user view.
Packet-filter firewall configuration example
Network requirements
As shown in Figure 114 , the internal network of a company is connected to Ethernet 1/1 of the router,
and the internal users access the Internet through Serial 2/0 of the router.
The company provides WWW, FTP and Telnet services to the outside. The internal subnet of the
company is 129.1.1.0, on which the internal FTP server address is 129.1.1.1, the Telnet server
address is 129.1.1.2, and the internal WWW server address is 129.1.1.3. The public address of the
company is 20.1.1.1. NAT is enabled on the router so that hosts on the internal network can access
the Internet and external hosts can access the internal servers.
Configure the firewall feature so that only specific users on external networks can access the internal
servers, and that only specific hosts on the internal network can access external networks. This
example permits access of the external user at 20.3.3.3.
Figure 114 Network diagram
Configuration procedure
# Enable the firewall function on the router.
<Router> system-view

HPE FlexNetwork MSR Series Specifications

General

Brand	HPE
Model	FlexNetwork MSR Series
Category	Network Router
Language	English