display ma-defend global-policy

Function

The display ma-defend global-policy command displays information about global policy for management and service plane protection.

Format

display ma-defend global-policy

Parameters

Parameter	Description	Value
global-policy	Displays a configured global policy for management and service plane protection.	-

Parameter

Description

Value

global-policy

Displays a configured global policy for management and service plane protection.

Views

All views

Default Level

1: Monitoring level

Task Name and Operations

Task Name	Operations
hostdefend	read

Usage Guidelines

Usage Scenario

To help the device defend against attacks or unauthorized logins initiated by sending protocol packets, management and service plane protection is used to prevent packets of a specified protocol or all protocols from being sent to the CPU. Using management and service plane protection improves device security and reliability and ensures normal network operation.

To verify management and service plane protection or troubleshoot faults, run the display ma-defend global-policy command to view information about global policy.

Precautions

In VS mode, this command is supported only by the admin VS.

Example

The actual command output varies according to the device. The command output here is only an example.

# Displays information about the global policy for management and service plane protection.

<HUAWEI> display ma-defend global-policy
MA-defend policy type: global-policy
----------------------------------------------------
  The global-policy is enabled
  --------------------------------------------------
  protocol       rule
  --------------------------------------------------
  FTP            deny
  BGP            permit
----------------------------------------------------

**Table 1** Description of the **display ma-defend global-policy** command output
Item	Description
MA-defend policy type	Type of policy for management and service plane protection: all: all policies. global-policy: policy taking effect on the Router. interface-policy: policy taking effect on an interface. slot-policy: policy taking effect on a board.
protocol	Protocol name, which was defined in the protocol command.
rule	Rule defined in a policy: deny: drops packets. permit: allows packets to be sent to the CPU.