Configuring a Global Policy for Management and Service Plane Protection

Procedure

1. Run system-view

   The system view is displayed.

2. Run ma-defend global-policy

   A global policy for management and service plane protection is created.

3. Run protocol { { bgp | ftp | isis | ldp | ospf | pimsm | rip | rsvp | snmp | ssh | telnet | tftp } | ipv6 { bgp4plus | ftp | ospfv3 | ssh | telnet | pimsm } } { permit | deny }

   A rule about whether to send the packets of specified protocols to the CPU is configured in the global policy.

   

   If FTP, SSH, SNMP, TFTP, or TELNET is disabled globally by running the protocol command and is not enabled on any active interface, connectivity to the device will be interrupted. (An active interface is an interface that can properly receive and send packets.)

   To ensure connectivity to the device, configure additional active interfaces and enable these protocols on them.

4. Run enable

   The global policy is enabled.

5. Run commit

   The configuration is committed.