HP MSR2000/3000/4000 Router Series Security Command Reference

331
Default
The ICMP error message check is disabled.
Views
ASPF policy view
Predefined user roles
network-admin
Usage guidelines
A normal ICMP error message carries information about the corresponding connection. If the information
does not match the connection, the ASPF permits or discards the packet as configured.
Examples
# Configure ASPF policy 1 to drop faked ICMP error messages.
<Sysname> system-view
[Sysname] aspf policy 1
[Sysname-aspf-policy-1] icmp-error drop
Related commands
• aspf policy
• display aspf policy
reset aspf session
Use reset aspf session to delete ASPF sessions.
Syntax
reset aspf session [ ipv4 | ipv6 ]
Views
User view
Predefined user roles
network-admin
Parameters
ipv4: Deletes IPv4 sessions of ASPF.
ipv6: Deletes IPv6 sessions of ASPF.
Usage guidelines
If you specify neither the keyword ipv4 nor ipv6, this command deletes all ASPF sessions.
Examples
# Clear all ASPF sessions.
<Sysname> reset aspf session
Related commands
display aspf session