R0106-HP MSR Router Series Security Command Reference(V7)

496
Predefined user roles
network-admin
network-operator
Parameters
global: Displays statistics about IPv4 connections that match connection limit rules globally.
interface interface-type interface-number: Specifies an interface by its type and number.
slot slot-number: Specifies a card by its slot number. This option is available only when you specify the
global keyword or specify a virtual interface (such as a VLAN interface or tunnel interface). (MSR4000.)
destination destination-ip: Specifies a destination by its IP address.
service-port port-number: Specifies a service port by its port number.
source source-ip: Specifies a source by its IP address.
count: Displays the number of limit rule-based statistics sets.
Usage guidelines
The statistics for connections that match connection limit rules include the following information:
• Connection information, including the source/destination IP address, service port, and transport
layer protocol of connections.
• Matching connection limit rules.
• Number of current connections.
• Whether or not new connections can be created.
To further filter the output statistics, specify the following options in the command:
• source source-ip.
• destination destination-ip.
• service-port port-number.
For example, if you specify the source source-ip and destination destination-ip combination, this
command displays statistics about IPv4 connections that match connection limit rules by source IP
address and destination IP address.
If you specify none of the source source-ip, destination destination-ip, and service-port port-number
option, this command displays statistics about all IPv4 connections that match connection limit rules.
Examples
# (MSR2000/MSR3000.) Display statistics about all IPv4 connections that match the connection limit
rule on GigabitEthernet 2/1/1.
<Sysname> display connection-limit stat-nodes interface gigabitethernet 2/1/1
Src IP address : 100.100.100.100
VPN instance : 0123456789012345678901234567890
Dst IP address : 200.200.200.200
VPN instance : abcdefghijklmnopqrstuvwxyzabcde
DS-Lite tunnel peer : --
Service : tcp/12345
Limit rule ID : 12345(ACL: 3001)
Sessions threshold Hi/Lo: 1100000/980000
Sessions count : 1050000