display access https-redirect chasten-user slot
Function
The display access https-redirect chasten-user slot command displays HTTPS redirection information about a user on a specified slot.
This command is supported only on the NetEngine 8000 F1A.
Parameters
| Parameter | Description | Value |
|---|---|---|
| ip-address ip-address |
Specifies the user IPv4 address. |
The value is in dotted decimal notation. |
| ipv6-address ipv6-address/length |
ipv6-address: specifies the user IPv6 address. Length: specifies the prefix length of an IPv6 address. This parameter applies to either a WAN interface address or a LAN interface address. |
ipv6-address: The value is a 32-digit hexadecimal number, in the format of X:X:X:X:X:X:X:X. length: The value is an integer ranging from 0 to 128. |
| vpn-instance instance-name |
Specifies the VPN instance name. |
The value is a string of 1 to 31 case-sensitive characters, spaces not supported. If spaces are used, the string must start and end with double quotation marks ("). In addition, the VPN instance name cannot be _public_. |
| state block |
Display information about blocked users. |
- |
| state check |
Display information about checked users. |
- |
| slot slotid |
Specifies the slot. |
The value is a string of 1 to 16 case-sensitive characters, spaces not supported. |
Usage Guidelines
Usage Scenario
When the HTTPS redirection chasten function is enabled,the number of connection requests from a user reaches a specified value within a period,the device blocks the connection requests from the user.run the display access https-redirect chasten-user slot command to view information about the HTTPS redirection connections restricted on a specified slot.
Prerequisites
The HTTPS redirection function has been enabled.
Precautions
- In VS mode, this command is supported only by the admin VS.
Example
The actual command output varies according to the device. The command output here is only an example.
<HUAWEI> display access https-redirect chasten-user slot 1 ipv6-address 2001:db8:1::/64 --------------------------------------------- User ID :2 IP Address :10.1.1.1 IPv6 Address :2001:db8:1::1/128 IPv6 PD Prefix :2001:db8:1::/64 VPN Instance :- Start Flow Time :2020-05-27 20:14:25 Flow Number :1 Check Flow Number :1 Block Flow Number :0 Flow Block Time :- Drop Flow Packet Number :0 Start Redirect Time :2020-05-27 20:14:25 Redirect Number :1 Check Redirect Number :1 Block Redirect Number :0 Redirect Block Time :- Drop Redirect Packet Number :0 ---------------------------------------------
<HUAWEI> display access https-redirect chasten-user slot 1 ip-address 10.1.1.1 --------------------------------------------- User ID :2 IP Address :10.1.1.1 IPv6 Address :- IPv6 PD Prefix :- VPN Instance :- Start Flow Time :2020-05-27 20:14:25 Flow Number :1 Check Flow Number :1 Block Flow Number :0 Flow Block Time :- Drop Flow Packet Number :0 Start Redirect Time :2020-05-27 20:14:25 Redirect Number :1 Check Redirect Number :1 Block Redirect Number :0 Redirect Block Time :- Drop Redirect Packet Number :0 ---------------------------------------------
<HUAWEI> display access https-redirect chasten-user slot 1 ipv6-address 2001:db8:1::1/128 --------------------------------------------- User ID :2 IP Address :10.1.1.1 IPv6 Address :2001:db8:1::1/128 IPv6 PD Prefix :2001:db8:1::/64 VPN Instance :- Start Flow Time :2020-05-27 20:14:25 Flow Number :1 Check Flow Number :1 Block Flow Number :0 Flow Block Time :- Drop Flow Packet Number :0 Start Redirect Time :2020-05-27 20:14:25 Redirect Number :1 Check Redirect Number :1 Block Redirect Number :0 Redirect Block Time :- Drop Redirect Packet Number :0 ---------------------------------------------
| Item | Description |
|---|---|
| User ID | User ID. |
| IP Address | IPv4 address. |
| IPv6 Address | IPv6 address. |
| IPv6 PD Prefix | IPv6 prefix address. |
| VPN Instance | VPN instance name. |
| Start Flow Time | Start detection time of flow chasten within a period. |
| Start Redirect Time | Start time for detecting the redirect chasten function. |
| Flow Number | Number of established flows of flow chasten within a period. |
| Flow Block Time | Start time of the flow chasten block function. From this time on, the user's HTTPS TCP SYN packets are discarded. |
| Check Flow Number | Number of checked flows of flow chasten within a period. |
| Check Redirect Number | Number of checked redirection packets with a reply received for the redirect chasten function within a period. |
| Block Flow Number | Number of block flows of flow chasten within a period. |
| Block Redirect Number | Number of block redirection packets with a reply received for the redirect chasten function within a period. |
| Drop Flow Packet Number | Number of discarded HTTPS TCP SYN packets when the user is in the flow block status. In this case, the flow block status is preferentially detected. If the user is in both the Flow block and Redirect block status, the number of discarded HTTPS TCP SYN packets is displayed as Drop Flow Packet Number. |
| Drop Redirect Packet Number | Number of discarded HTTPS TCP SYN packets when the user is in the redirect block status. |
| Redirect Number | Number of redirection packets with a reply received for the redirect chasten function within a period. |
| Redirect Block Time | Start time of the redirect chasten block function. From this time on, the user's HTTPS TCP SYN packets are discarded. |