Displaying And Maintaining Aspf - HP MSR Series Configuration Manual

•
The packet filter allows only solicited access from the source zone to the network that the
destination zone connects.
•
The ASPF policy compares the packets against session entries and allows matching packets
from the source zone to the destination zone. The policy also allows return packets from the
destination zone to the source zone.
To apply an ASPF policy to a zone pair:
Step
1. Enter system view.
2. Enter zone pair view.
3. Apply an ASPF policy to the
zone pair.

Displaying and maintaining ASPF

Execute display commands in any view and reset commands in user view.
Task
Display the configuration of all ASPF policies
and their applications to interfaces.
Display ASPF policy applications to
interfaces.
Display the configuration of an ASPF policy.
Display ASPF sessions (centralized devices
in standalone mode).
Display ASPF sessions (distributed devices in
standalone mode/centralized devices in IRF
mode).
Display ASPF sessions (distributed devices in
IRF mode).
Clear ASPF session statistics (centralized
devices in standalone mode).
Clear ASPF session statistics (distributed
devices in standalone mode/centralized
devices in IRF mode).
Clear ASPF session statistics (distributed
devices in IRF mode).
Command
system-view
zone-pair security source
source-zone-name destination
destination-zone-name
aspf apply policy
aspf-policy-number
Command
display aspf all
display aspf interface
display aspf policy aspf-policy-number
display aspf session [ ipv4 | ipv6] [ verbose ]
display aspf session [ ipv4 | ipv6 ] [ slot slot-number ]
[ verbose ]
display aspf session [ ipv4 | ipv6 ] [ chassis
chassis-number slot slot-number ] [ verbose ]
reset aspf session [ ipv4 | ipv6 ]
reset aspf session [ ipv4 | ipv6 ] [ slot slot-number ]
reset aspf session [ ipv4 | ipv6 ] [ chassis
chassis-number slot slot-number ]
444
Remarks
N/A
For information about configuring
a zone pair, see Fundamentals
Command Reference.
By default, the default ASPF
policy is applied to the zone pair,
which inspects packets of all
protocols.