The display deception ip-state command displays the online status of IP addresses scanned by the switch.
| Parameter | Description | Value |
|---|---|---|
| ip-address | Displays the online status of a specified IP address. |
The value is in dotted decimal notation. |
| verbose | Displays the detailed online status of IP addresses. |
- |
Usage Scenario
A switch checks the online status of IP addresses every 30 minutes. If traffic destined for address A is deceived, the interval for checking the online status of address A is shortened to 10 to 110 seconds to minimize the adverse impact on network services. The interval depends on the number of the deceived source addresses. More source addresses result in a longer interval.
The display deception ip-state command output does not contain the IP address online status if the deception detect-network command is not used to set any detected network segment.
Precautions
The IP addresses scanned by the DecoySensor must be on the detected network segment, and the DecoySensor has an IP address belonging to this network segment.
The reset deception ip-state command clears the IP address online status and immediately initiates the check on the online status of IP addresses.
# Display the online status of IP addresses scanned by the switch.
<HUAWEI> display deception ip-state --------------------------------------------------------------------------------------------------- Current total number = 0 --------------------------------------------------------------------------------------------------- ip-address state vlan vpn-instance ---------------------------------------------------------------------------------------------------
# Display the detailed online status of IP addresses scanned by the switch.
<HUAWEI> display deception ip-state verbose --------------------------------------------------------------------------------------- 10.1.1.1 information: --------------------------------------------------------------------------------------- state :online vlan :10 vpn-instance : proxy_flag :1 on2off_flag :0 redirect_num :0 --------------------------------------------------------------------------------------- Total displayed = 1
Item |
Description |
|---|---|
| Current total number | Number of entries. |
ip-address information |
Detailed information about the IP address. |
ip-address |
IP address. |
state |
Online status of the IP address:
|
vlan |
VLAN to which the IP address belongs. |
vpn-instance |
VPN instance of the IP address. |
proxy_flag |
Whether the IP address is learned through proxy ARP:
|
on2off_flag |
Whether the IP address changes from online to offline:
|
redirect_num |
Number of the deceived source IP addresses that scanned this IP address. |