The display cpu-defend ma-defend statistics command displays statistics about packets processed using management and service plane protection.
Usage Scenario
To help the Router defend against attacks or unauthorized logins initiated by sending protocol packets, management and service plane protection is used to prevent packets of a specified protocol or all protocols from being sent to the CPU. Using management and service plane protection improves device security and reliability and ensures normal network operation.
To verify management and service plane protection or troubleshoot faults, run the display cpu-defend ma-defend statistics command to view statistics about packets processed using management and service plane protection.Precautions
In VS mode, this command is supported only by the admin VS.
The actual command output varies according to the device. The command output here is only an example.
<HUAWEI> display cpu-defend ma-defend statistics slot 1 Slot/Intf Attack-Type Total-Packets Passed-Packets Dropped-Packets -------------------------------------------------------------------------------- 1 MA-Defend 0 0 0 -------------------------------------------------------------------------------- FTP SERVER 0 0 0 SSH SERVER 0 0 0 SNMP 0 0 0 TELNET SERVER 0 0 0 TFTP 0 0 0 BGP 0 0 0 LDP 0 0 0 RSVP 0 0 0 OSPF 0 0 0 RIP 0 0 0 ISIS 0 0 0 PIMSM 0 0 0 BGP4PLUS 0 0 0 IPv6 FTP SERVER 0 0 0 IPv6 OSPFv3 0 0 0 IPv6 PIM 0 0 0 IPv6 SSH SERVER 0 0 0 IPv6 TELNET SERVER 0 0 0 --------------------------------------------------------------------------------
Item | Description |
---|---|
Slot/Intf | Slot ID or interface name of an interface board. |
Attack-Type | Type of local attack defense. |
Total-Packets | Total number of received packets. |
Passed-Packets | Number of packets allowed to be sent to the CPU. |
Dropped-Packets | Number of discarded packets. |