Client-Verify Http Enable - HP FlexNetwork MSR Series Command Reference Manual
Comware 7 security
Hide thumbs
Also See for FlexNetwork MSR Series:
- Configuration manual (392 pages) ,
- Configuration manuals (159 pages)
Advertisement
can use the display client-verify dns protected ip command to display the protected IP list for
DNS client verification.
Examples
# Enable DNS client verification on interface GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] client-verify dns enable
Related commands
client-verify dns protected ip
display client-verify dns protected ip
client-verify http enable
Use client-verify http enable to enable HTTP client verification on an interface.
Use undo client-verify http enable to disable HTTP client verification on an interface.
Syntax
client-verify http enable
undo client-verify http enable
Default
HTTP client verification is disabled on an interface.
Views
Interface view
Predefined user roles
network-admin
Usage guidelines
Enable HTTP client verification on the interface connected to the external network. This feature
protects internal servers against HTTP flood attacks.
For the HTTP client verification to collaborate with HTTP flood attack prevention, specify
client-verify as the HTTP flood attack prevention action. During collaboration, the device adds the
victim IP address to the protected IP list and verifies the untrusted sources if it detects an HTTP flood
attack. You can use the display client-verify http protected ip command to display the protected
IP list for HTTP client verification.
Examples
# Enable HTTP client verification on interface GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] client-verify http enable
Related commands
client-verify http protected ip
display client-verify http protected ip
821
Advertisement
