display deception config-flow

Function

The display deception config-flow command displays the configuration flow table.

Format

display deception config-flow [ slot slot-id ]

Parameters

Parameter	Description	Value
slot slot-id	Specifies a slot ID.	The value must be set according to the device configuration.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

When a detected network segment, bait network segment, or deception whitelist is configured, a configuration flow table is generated. If the preceding configuration is changed, the switch checks whether the deceived traffic meets the conditions of configuration flow tables and determines whether to lure the traffic to the Decoy.

Example

# Display the configuration flow table.

<HUAWEI> display deception config-flow
                                                                                                                                    
Slot: 0                                                                                                                             
-------------------------------------------------------------------------------------------------------                             
CFG Flow ID 1 information:                                                                                                          
-------------------------------------------------------------------------------------------------------                             
Priority        :0                                                                                                                  
Action          :1                                                                                                                  
Causeid         :16384                                                                                                              
Vpn-instance    :                                                                                                                   
Source IP       :10.10.11.11/255.255.255.255                                                                                        
-------------------------------------------------------------------------------------------------------                             
CFG Flow ID 2 information:                                                                                                          
-------------------------------------------------------------------------------------------------------                             
Priority        :1                                                                                                                  
Action          :4                                                                                                                  
Causeid         :4096                                                                                                               
Vpn-instance    :                                                                                                                   
Destination IP  :192.168.1.0/255.255.255.240                                                                                        
-------------------------------------------------------------------------------------------------------                             
CFG Flow ID 3 information:                                                                                                          
-------------------------------------------------------------------------------------------------------                             
Priority        :3                                                                                                                  
Action          :8                                                                                                                  
Causeid         :1                                                                                                                  
Vpn-instance    :                                                                                                                   
Destination IP  :10.10.10.0/255.255.255.0                                                                                           
-------------------------------------------------------------------------------------------------------                             
CFG Flow ID 4 information:                                                                                                          
-------------------------------------------------------------------------------------------------------                             
Priority        :3                                                                                                                  
Action          :8                                                                                                                  
Causeid         :1                                                                                                                  
Vpn-instance    :                                                                                                                   
Source IP       :10.10.10.0/255.255.255.0                                                                                           
-------------------------------------------------------------------------------------------------------                             
CFG Flow ID 5 information:                                                                                                          
-------------------------------------------------------------------------------------------------------                             
Priority        :3                                                                                                                  
Action          :8                                                                                                                  
Causeid         :1                                                                                                                  
Vpn-instance    :                                                                                                                   
Destination IP  :192.168.1.0/255.255.255.0                                                                                          
-------------------------------------------------------------------------------------------------------                             
CFG Flow ID 6 information:                                                                                                          
-------------------------------------------------------------------------------------------------------                             
Priority        :3                                                                                                                  
Action          :8                                                                                                                  
Causeid         :1                                                                                                                  
Vpn-instance    :                                                                                                                   
Source IP       :192.168.1.0/255.255.255.0                                                                                          
-------------------------------------------------------------------------------------------------------                             
CFG Flow ID 7 information:                                                                                                          
-------------------------------------------------------------------------------------------------------                             
Priority        :0                                                                                                                  
Action          :1                                                                                                                  
Causeid         :16384                                                                                                              
Vpn-instance    :                                                                                                                   
Destination IP  :10.10.10.22/255.255.255.255

**Table 1** Description of the **display deception config-flow** command output
Item	Description
Slot	Slot ID.
CFG Flow ID n information	Information about configuration flow table n.
Priority	Priority of the configuration flow entry. The value is in the range from 0 to 10, and a smaller value indicates a higher priority. If a flow matches multiple configuration flow entries, the configuration flow entry with the highest priority takes effect.
Action	Action taken on the packets matching the configuration flow entry: 1: Deception check is not performed on the packets. 2: The packets are discarded. 4 and 8: Deception check is performed on the packets.
Causeid	Type of packets. The value in 2ⁱ, in which i can be as follows: 0: packets matching the deception detected network segment 12: packets matching the bait network segment 14: packets matching the deception whitelist
Vpn-instance	VPN instance.
Destination IP	Destination IP address of traffic.
Destination Port	Destination TCP port number of traffic.
Source IP	Source IP address of traffic.