R3303-HP HSR6800 Routers Security Command Reference

503
Examples
# Display ACLs referenced by the GDOI KS group abc.
<Sysname> display gdoi ks acl group abc
Group Name: abc
ACL abc
rule 0 permit ip source 1.1.1.2 0 destination 2.2.2.3 0
rule 1 permit tcp source 1.1.0.0 0.0.255.255 destination 2.2.0.0 0.0.255.255
rule 2 permit ip
# Display ACLs referenced by all GDOI KS groups.
<Sysname> display gdoi ks acl
Group Name: abc
ACL abc
rule 0 permit ip source 1.1.1.2 0 destination 2.2.2.3 0
rule 1 permit tcp source 1.1.0.0 0.0.255.255 destination 2.2.0.0 0.0.255.255
rule 2 permit ip
Group Name: xyz
ACL 3000
rule 0 permit ip source 1.1.2.2 0 destination 2.2.3.3 0
rule 2 deny ip
ACL xyz
rule 0 permit ip source 1.1.3.0 0.0.0.255 destination 2.2.4.0 0.0.0.255
Table 84 Command output
Field Descri
p
tion
Group Name GDOI KS group name.
rule Rule in the ACL.
display gdoi ks members
Use display gdoi ks members to display information about online GMs in GDOI KS groups.
Syntax
display gdoi ks members [ group group-name ] [ ip ip-address ]
Views
User view
Default command level
1: Monitor level
Parameters
group group-name: Specifies a GDOI KS group by its name, a case-sensitive string of 1 to 63 characters.
ip ip-address: Specifies a GM by its IP address.