HP MSR2000/3000/4000 Router Series Security Command Reference

387
MSR4000:
display connection-limit stat-nodes { global | interface interface-type interface-number } [ slot
slot-number ] [ destination destination-ip | service-port port-number | source source-ip ] * [ count ]
Views
User view
Predefined user roles
network-admin
network-operator
Parameters
global: Displays statistics about IPv4 connections matching connection limit rules globally.
interface interface-type interface-number: Specifies an interface by its type and number.
slot slot-number: Displays statistics about IPv4 connections matching connection limit rules on a specified
card or a virtual interface, where the slot-number argument represents the number of the slot that holds
the card. This option is visible only when you specify the global keyword or specify a virtual interface
(such as a tunnel interface). (MSR4000.)
destination destination-ip: Displays statistics about IPv4 connections matching connection limit rules by
destination IP address.
service-port port-number: Displays statistics about IPv4 connections matching connection limit rules by
service port.
source source-ip: Displays statistics about IPv4 connections matching connection limit rules by source IP
address.
count: Displays the number of limit rule-based statistics sets.
Usage guidelines
The statistics collected include the source/destination IP address, service port, and transport layer
protocol of connections, the connection limit rule, the current connection number, and whether new
connections can be created.
• If you specify one or more of the source source-ip, destination destination-ip, and service-port
port-number options, this command displays statistics about IPv4 connections matching connection
limit rules based on one or multiple criteria. For example, if you specify the source source-ip and
destination destination-ip combination, this command displays statistics about IPv4 connections
matching connection limit rules by source IP address and destination IP address.
• If you specify none of the source source-ip, destination destination-ip, and service-port port-number
option, this command displays statistics about all IPv4 connections matching connection limit rules.
Examples
# (MSR2000/MSR3000.) Display statistics about all IPv4 connections matching the connection limit rule
on Ethernet 1/1.
<Sysname> display connection-limit stat-nodes interface ethernet 1/1
Src IP address : 100.100.100.100
VPN instance : 0123456789012345678901234567890
Dst IP address : 200.200.200.200
VPN instance : abcdefghijklmnopqrstuvwxyzabcde
Tunnel ID : 1234567890
Service : tcp/12345