R3303-HP HSR6800 Routers Network Management and Monitoring Configuration Guide

191
Ste
p
Command Remarks
2. Enable Host-monitor. host-monitor { inbound | outbound }
By default, Host-monitor is
disabled.
Make sure Host-monitor is
enabled in the same traffic
direction as Netstream.
Freezing legitimate flow entries
After you freeze the legitimate flow entries for a card, all new flow entries automatically added on it are
illegitimate entries. You can only manually add new legitimate flow entries for the card.
To freeze legitimate flow entries in the host monitor table:
Ste
p
Command Remarks
1. Enter system view. system-view N/A
2. Freeze legitimate
flow entries in the
host monitor table.
• In standalone mode:
host-monitor fixup [ slot slot-number ]
• In IRF mode:
host-monitor fixup [ chassis chassis-number slot
slot-number ]
By default, the flow
entries are in
Unfixed state.
Adding legitimate flow entries
Ste
p
Command
1. Enter system view. system-view
2. Add a legitimate flow
entry.
• In standalone mode:
host-monitor add source source-ip destination destination-ip protocol
protocol interface interface-type interface-number { inbound | outbound }
[ vpn-instance vpn-instance-name ] [ slot slot-number ]
• In IRF mode:
host-monitor add source source-ip destination destination-ip protocol
protocol interface interface-type interface-number { inbound | outbound }
[ vpn-instance vpn-instance-name ] [ chassis chassis-number slot
slot-number ]
If no fix action has been performed on a card, the entry added for the card is in Unfixed state. If the
action has been performed, the entry is in Fixed state.
Deleting a legitimate flow entry
To delete a fixed or unfixed legitimate flow entry:
Ste
p
Command
1. Enter system view.
system-view