4000 Router Series Security Command Reference

324

gtp: Specifies GTP, an application layer protocol.

h323: Specifies H.323 protocol stack, application layer protocols.

icmp: Specifies ICMP, a transport layer protocol.

icmpv6: Specifies ICMPv6, a transport layer protocol.

rawip: Specifies Raw IP, a transport layer protocol.

rstp: Specifies RSTP, an application layer protocol.

sctp: Specifies SCTP, a transport layer protocol.

sip: Specifies SIP, an application layer protocol.

tcp: Specifies TCP, a transport layer protocol.

tftp: Specifies TFTP, an application layer protocol.

udp: Specifies UDP, a transport layer protocol.

udp-lite: Specifies UDP-Lite, a transport layer protocol.

Usage guidelines

Repeat the detect command to configure ASPF inspection for multiple protocols.

For a multi-channel protocol, if you enable TCP or UDP inspection without configuring application layer

protocol inspection, the device might not be able to receive response packets. HP recommends that you

enable application layer protocol inspection together with TCP/UDP inspection.

For a single-channel protocol, such as Telnet, you only need to configure the transport layer protocol (TCP

or UDP) inspection.

Examples

# Configure ASPF inspection for FTP packets.

<Sysname> system-view

[Sysname] aspf policy 1

[Sysname-aspf-policy-1] detect ftp

Related commands

display aspf policy

display aspf all

Use display aspf all to display the configuration of all ASPF policies and their applications.

Syntax

display aspf all

Views

Any view

Predefined user roles

network-admin

network-operator