enable(Global management service plane defense view)

Function

The enable command enables global management and service plane protection.

The undo enable command disables global management and service plane protection.

By default, global management and service plane protection is disabled.

Format

enable

undo enable

Parameters

None

Views

Global management service plane defense view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
hostdefend	write

Usage Guidelines

Usage Scenario

To help the device defend against attacks or unauthorized logins initiated by sending protocol packets, management and service plane protection is used to prevent packets of a specified protocol or all protocols from being sent to the CPU. Using management and service plane protection improves device security and reliability and ensures normal network operation.

A global policy takes effect on an entire Router. It simplifies configuration comparing with the method involving configuration on each interface of the entire Router.

The enable command can be run to apply a configured global policy to an entire Router.

Configuration Impact

After the enable command is run, the configured global policy will take effect.

Precautions

In VS mode, this command is supported only by the admin VS.

Example

# Create a global policy and apply it to the device.

<HUAWEI> system-view
[~HUAWEI] ma-defend global-policy
[*HUAWEI-app-sec-global] enable