HP MSR2000/3000/4000 Router Series Security Command Reference

327
Table 41 Command output
Field Descri
p
tion
Enable ICMP error message check Drop ICMP error messages.
Enable TCP SYN packet check
Drop any non-SYN packet that is the first packet over
a TCP connection.
Disable ICMP error message check Do not drop ICMP error messages.
Disable TCP SYN packet check
Do not drop any non-SYN packet that is the first packet
over a TCP connection.
Detect these protocols Protocols inspected by ASPF.
Related commands
aspf policy
display aspf session
Use display aspf session to display ASPF sessions.
Syntax
display aspf session [ ipv4 | ipv6 ] [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
ipv4: Displays IPv4 ASPF sessions.
ipv6: Displays IPv6 ASPF sessions.
verbose: Displays detailed information about ASPF sessions. If you do not specify the keyword, the
command displays the general information about ASPF sessions.
Usage guidelines
If you specify neither the keyword ipv4 nor ipv6, this command displays all ASPF sessions on the device.
Examples
# Display general information for IPv4 ASPF sessions. (MSR2000/MSR3000)
<Sysname> display aspf session ipv4
Initiator:
Source IP/port: 192.168.1.18/1877
Destination IP/port: 192.168.1.55/22
VPN instance/VLAN ID/VLL ID: -/-/-
Protocol: TCP(6)
Initiator:
Source IP/port: 192.168.1.18/1792