R0106-HP MSR Router Series Security Command Reference(V7)

609
Field Descri
p
tion
DS-Lite tunnel peer
Peer address of the DS-Lite tunnel.
If the device is the AFTR of a DS-Lite tunnel, this field displays the B4's
address from which the packet comes.
In other situations, this field displays hyphens (--).
TTL(sec)
Remaining aging time of the trusted IPv4 address, in seconds. If no aging
time is set, this field displays Never.
display client-verify trusted ipv6
Use display client-verify trusted ipv6 to display trusted IPv6 addresses for client verification.
Syntax
MSR2000/MSR3000:
display client-verify { dns | http | tcp } trusted ipv6 [ ipv6-address [ vpn vpn-instance-name ] ] [ count ]
MSR4000:
display client-verify { dns | http | tcp } trusted ipv6 [ ipv6-address [ vpn vpn-instance-name ] ] [ slot
slot-number ] [ count ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
dns: Specifies the DNS client verification function.
http: Specifies the HTTP client verification function.
tcp: Specifies the TCP client verification function.
ipv6-address: Specifies a trusted IPv6 address. If no IPv6 address is specified, this command displays all
matching trusted IPv6 addresses.
vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance to which the trusted IPv6 address
belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. Do not specify
this option if the trusted IPv6 address is on the public network.
slot slot-number: Specifies a card by its slot number. If no card is specified, this command displays trusted
IPv6 addresses on all cards. (MSR4000.)
count: Displays the number of matching trusted IPv6 addresses.
Examples
# (MSR2000/MSR3000.) Display the trusted IPv6 list for DNS client verification.
<Sysname> display client-verify dns trusted ipv6
IPv6 address VPN instance TTL(sec)
1::3 vpn1 1643
1234::1234 a012345678901234 1234