< Home

display deception interface

Function

The display deception interface command displays information about all deception-enabled interfaces.

Format

display deception interface

Parameters

None

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

You can run this command to view information about all deception-enabled interfaces, including the interface name, VLAN ID, and election status of interfaces for detecting IP address scanning. If a detected network segment has been configured using the deception detect-network command, the deception function can be configured only on the interfaces whose IP addresses are on the detected network segment.

Precautions

Interfaces whose IP addresses are not on the detected network segment cannot detect IP address scanning or participate in the election.

Example

# Display information about all deception-enabled interfaces.

<HUAWEI> display deception interface
----------------------------------------------------------------------------------------------------------
Current total number = 0                                                        
----------------------------------------------------------------------------------------------------------
name                          ip-address          vlan   election-state   master-ip     vpn-instance 
----------------------------------------------------------------------------------------------------------
----------------------------------------------------------------------------------------------------------
Table 1 Description of the display deception interface command output

Item

Description

name

Interface name.

ip-address

IP address of the interface.

vlan

VLAN to which the interface belongs.

election-state

Election status of the interface for detecting IP address scanning:
  • master: If the device of the interface is elected as the active DecoySensor, it detects IP scanning on the network.
  • slave: If the device of the interface is elected as a standby DecoySensor, it does not detect IP scanning on the network.
  • init: Election is ongoing.
  • --: The interface address is not in the detected network segment, so the interface does not participate in election.

master-ip

IP address of the active DecoySensor on the network segment.

vpn-instance

VPN instance of the interface.

Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >