R3303-HP HSR6800 Routers Security Command Reference

383
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# Display packet filtering statistics on all interfaces.
<Sysname> display firewall-statistics all
firewall default
Use firewall default to specify the default firewall filtering action of the IPv4 firewall.
Syntax
Standalone mode:
firewall default { deny | permit } { all | slot slot-number }
IRF mode:
firewall default { deny | permit } { all | chassis chassis-number slot slot-number }
Default
The default filtering action of the IPv4 firewall is permitting packets to pass (permit).
Views
System view
Default command level
2: System level
Parameters
deny: Specifies the filtering action as denying packets to pass the firewall.
permit: Specifies the filtering action as permitting packets to pass the firewall.
all: Specifies all interface cards.
slot slot-number: Specifies the interface card in the specified slot. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies an interface card in an IRF member device. The
chassis-number argument represents the IRF member ID of the device. The slot-number argument
represents the slot number of the card. (In IRF mode.)
Examples
# Specify the default filtering action of the IPv4 firewall as denying packets to pass.
<Sysname> system-view
[Sysname] firewall default deny
firewall enable
Use firewall enable to enable the IPv4 firewall function.
Use undo firewall enable to disable the IPv4 firewall function.