display ma-defend all

Function

The display ma-defend all command displays information about all policies for management and service plane protection.

Format

display ma-defend all

Parameters

Parameter	Description	Value
all	Displays all policies for management and service plane protection.	-

Parameter

Description

Value

all

Displays all policies for management and service plane protection.

Views

All views

Default Level

1: Monitoring level

Task Name and Operations

Task Name	Operations
hostdefend	read

Usage Guidelines

Usage Scenario

To help the device defend against attacks or unauthorized logins initiated by sending protocol packets, management and service plane protection is used to prevent packets of a specified protocol or all protocols from being sent to the CPU. Using management and service plane protection improves device security and reliability and ensures normal network operation.

To verify management and service plane protection or troubleshoot faults, run the display ma-defend all command to view information about all policies.

Precautions

In VS mode, this command is supported only by the admin VS.

Example

The actual command output varies according to the device. The command output here is only an example.

# Displays information about all policies for management and service plane protection.

<HUAWEI> display ma-defend all
MA-defend policy type: global-policy
----------------------------------------------------
  The global-policy is enabled
  --------------------------------------------------
  protocol       rule
  --------------------------------------------------
  FTP            deny
  BGP            permit
----------------------------------------------------

**Table 1** Description of the **display ma-defend all** command output
Item	Description
MA-defend policy type	Type of policies for management and service plane protection: all: all policies. global-policy: policy taking effect on the Router. interface-policy: policy taking effect on an interface. slot-policy: policy taking effect on a board.
protocol	Protocol name, which was defined in the protocol command.
rule	Rule defined in a policy: deny: drops packets. permit: allows packets to be sent to the CPU.