F3215-HP Load Balancing Module Security Command Reference-6PW101

270
inbound: Collects statistics on packets to the security zone.
outbound: Collects statistics on packets sent out of the security zone.
source-ip: Collects statistics on packets to the security zone by source IP address.
Usage guidelines
You can enable multiple types of traffic statistics collections for a security zone. The collection results can
be viewed by related display commands.
Examples
# In security zone trust, enable traffic statistics collection by destination IP address.
<Sysname> system-view
[Sysname] zone name trust id 2
[Sysname-zone-trust] flow-statistics enable destination-ip
# You can use the following command to view statistics on packets sent out of the security zone with the
destination IP address being 2.2.2.2. (You can specify the destination IP address as needed.)
[Sysname-zone-trust] display flow-statistics statistics destination-ip 2.2.2.2
Related commands
display flow-statistics statistics
reset attack-defense statistics zone
Use reset attack-defense statistics zone to clear the attack protection statistics of a security zone.
Syntax
reset attack-defense statistics [ vd vd-name ] zone zone-name
Views
User view
Default command level
1: Monitor level
Parameters
vd vd-name: Clears the attack protection statistics of a specific VD. The vd-name argument refers to the
VD name, a case-insensitive string of 1 to 20 characters. If you do not specify this option, this command
clears the attack protection statistics of the default VD.
zone zone-name: Specifies a security zone. The zone-name argument refers to security zone name, a
case-insensitive string of 1 to 20 characters.
Examples
# Clear the attack protection statistics of security zone trust.
<Sysname> reset attack-defense statistics zone trust
# Clear the attack protection statistics of security zone trust on VD vdtest.
<Sysname> reset attack-defense statistics vd vdtest zone trust
Related commands
display attack-defense statistics zone