HP MSR2000/3000/4000 Router Series Security Command Reference

322
ASPF commands
aspf
Use aspf to apply an ASPF policy to an interface.
Use undo aspf to remove an ASPF policy from an interface.
Syntax
aspf policy aspf-policy-number { inbound | outbound }
undo aspf policy aspf-policy-number { inbound | outbound }
Default
No ASPF policy exists on an interface.
Views
Interface view
Predefined user roles
network-admin
Parameters
aspf-policy-number: Specifies an ASPF policy number. The value range for this argument is 1 to 256.
inbound: Applies the ASPF policy to incoming packets.
outbound: Applies the ASPF policy to outgoing packets.
Usage guidelines
To monitor the traffic through an interface, you must apply a configured ASPF policy to that interface.
Make sure a connection initiation packet and the response packet pass through the same interface,
because an ASPF stores and maintains the application layer protocol status based on interfaces.
You can apply an ASPF policy to both the inbound and outbound directions of an interface.
Examples
# Apply ASPF policy 1 to the outbound direction of Ethernet 1/1.
<Sysname> system-view
[Sysname] interface ethernet 1/1
[Sysname-Ethernet1/1] aspf policy 1 outbound
Related commands
• aspf policy
• display aspf policy all
• display aspf policy interface
aspf policy
Use aspf policy to create an ASPF policy and enter its view.