R0106-HP MSR Router Series Security Configuration Guide(V7)

375
Displaying and maintaining APR
Execute display commands in any view and reset commands in user view.
Task Command
Display information about application
protocols.
display application [ name application-name | pre-defined |
user-defined ]
Display information about application
groups.
display app-group [ name group-name | pre-defined |
user-defined ]
Display statistics for the specified application
protocols.
display application statistics [ direction { inbound | outbound }
| interface interface-type interface-number | name
application-name ] *
Display statistics for application protocols on
an interface in descending order based on
the specified criteria.
display application statistics top number { bps | bytes | packets
| pps } interface interface-type interface-number
Display information about pre-defined port
mappings.
display port-mapping pre-defined
Display information about user-defined port
mappings.
display port-mapping user-defined [ application
application-name | port port-number ]
Clear application statistics for an interface or
all interfaces.
reset application statistics [ interface interface-type
interface-number ]
APR configuration example
Network requirements
As shown in Figure 112, configure APR on the router to recognize the HTTP packets sent by the host and
destined for port 8080.
The router drops the packets recognized by APR.
Figure 112 Network diagram
Configuration procedure
# Create an application group named group1, and enter application group view.
<Router> system-view
[Router] app-group group1
# Add HTTP to the application group.
[Router-app-group-group1] include application http
[Router-app-group-group1] quit