display service-security policy ipv4

Function

The display service-security policy ipv4 command displays configurations of IPv4 MPAC policies.

Format

display service-security policy ipv4 [ security-policy-name [ slot slot-id ] ]

Parameters

Parameter	Description	Value
security-policy-name	Specifies the name of an MPAC policy.	The value is a string of 1 to 31 case-sensitive characters without spaces and must start with a letter.
slot slot-id	Specifies the slot ID of an interface board. The interface board in this slot must be properly installed.	-

Parameter

Description

Value

security-policy-name

Specifies the name of an MPAC policy.

The value is a string of 1 to 31 case-sensitive characters without spaces and must start with a letter.

slot slot-id

Specifies the slot ID of an interface board. The interface board in this slot must be properly installed.

Views

All views

Default Level

1: Monitoring level

Task Name and Operations

Task Name	Operations
hostdefend	read

Usage Guidelines

Usage Scenario

MPAC policies can be configured to filter packets to be sent to the CPU, thereby helping protect devices against various types of attacks.

The display service-security policy command displays configurations of MPAC policies, such as the rules, step, and description.

Example

The actual command output varies according to the device. The command output here is only an example.

# Display configurations of the IPv4 MPAC policy named huawei in slot 0.

<HUAWEI> display service-security policy ipv4 huawei slot 0
Policy Name : huawei
Step        : 5
 rule 5 permit protocol tcp source-ip 127.1.1.1 0 source-port 1000
 rule 10 permit protocol ip source-ip 10.10.1.0 0.0.0.255

# Display configurations of all IPv4 MPAC policies.

<HUAWEI> display service-security policy ipv4
Policy Name : A1                                                                
Step        : 5                                                                 
                                                                                
Policy Name : a1                                                                
Step        : 5                                                                 

Policy Name : huawei                                                            
Step        : 5                                                                 
 rule 5 permit protocol tcp source-ip 127.1.1.1 0 source-port 1000              
 rule 10 permit protocol ip source-ip 10.10.1.0 0.0.0.255                       
                                                                                
Policy Name : huawei1                                                           
Step        : 5                                                                 
                                                                                
Policy Name : huawei1#                                                          
Step        : 5

# Display configurations of the IPv4 MPAC policy named huawei.

<HUAWEI> display service-security policy ipv4 huawei
Policy Name : huawei
Step        : 5
 rule 5 permit protocol tcp source-ip 127.1.1.1 0 source-port 1000
 rule 10 permit protocol ip source-ip 10.10.1.0 0.0.0.255

**Table 1** Description of the **display service-security policy ipv4** command output
Item	Description
Policy Name	Name of an MPAC policy.
Step	Step of an MPAC policy.
rule	Rules in an MPAC policy.