Download Print this page

Blacklist Ipv6 - HP FlexNetwork MSR Series Command Reference Manual

Comware 7 security
Hide thumbs Also See for FlexNetwork MSR Series:

Advertisement

timeout minutes: Specifies the aging time in minutes for the blacklist entry, in the range of 1 to 1000.
If you do not specify this option, the blacklist entry never ages out. You must delete it manually.
Usage guidelines
The undo blacklist ip command deletes only manually added IPv4 blacklist entries. To delete
dynamically added IPv4 blacklist entries, use the reset blacklist ip command.
A blacklist entry with an aging time is not saved to the configuration file and cannot survive a reboot.
You can use the display blacklist ip command to display all effective IPv4 blacklist entries.
Examples
# Add a blacklist entry for the IP address 192.168.1.2 and set the aging time to 20 minutes for the
entry.
<Sysname> system-view
[Sysname] blacklist ip 192.168.1.2 timeout 20
Related commands
blacklist enable
blacklist global enable
display blacklist ip

blacklist ipv6

Use blacklist ipv6 to add an IPv6 blacklist entry.
Use undo blacklist ipv6 to delete an IPv6 blacklist entry.
Syntax
blacklist ipv6 source-ipv6-address [ vpn-instance vpn-instance-name ] [ timeout minutes ]
undo blacklist ipv6 source-ipv6-address [ vpn-instance vpn-instance-name ]
Default
No IPv6 blacklist entries exist.
Views
System view
Predefined user roles
network-admin
Parameters
source-ipv6-address: Specifies an IPv6 address for the blacklist entry. Packets sourced from this
address will be dropped.
vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance to which the blacklist
belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. Do not
specify this option if the blacklist is on the public network.
timeout minutes: Specifies the aging time in minutes for the blacklist entry, in the range of 1 to 1000.
If you do not specify this option, the blacklist entry never ages out. You must delete it manually.
Usage guidelines
The undo blacklist ipv6 command deletes only manually added IPv6 blacklist entries. To delete
dynamically added IPv6 blacklist entries, use the reset blacklist ipv6 command.
A blacklist entry with an aging time is not saved to the configuration file and cannot survive a reboot.
You can use the display blacklist ipv6 command to display all effective IPv6 blacklist entries.
817

Advertisement

loading