Port-Mapping; Tcp Syn-Check - HPE FlexNetwork HSR6800 Security Command Reference

port-mapping

Use port-mapping to map a port to an application layer protocol.
Use undo port-mapping to remove a port mapping entry.
Syntax
port-mapping application-name port port-number [ acl acl-number ]
undo port-mapping [ application-name port port-number [ acl acl-number ] ]
Default
There is no mapping between the port and the application layer.
Views
System view
Default command level
2: System level
Parameters
application-name: Name of the application for port mapping. Available applications include FTP,
H323, HTTP, HTTPS, IKE, RTSP, SMTP, SSH, and VAM.
port port-number: Specifies the port that the application layer protocol is mapped to. The port
number is in the range of 0 to 65535.
acl acl-number: Specifies the IPv4 ACL for indicating the host range. The ACL number is in the range
of 2000 to 2999.
Examples
# Map port 3456 to the FTP protocol.
<Sysname> system-view
[Sysname] port-mapping ftp port 3456
Related commands
display port-mapping

tcp syn-check

Use tcp syn-check to specify to drop any non-SYN packet that is the first packet over a TCP
connection.
Use undo tcp syn-check to restore the default.
Syntax
tcp syn-check
undo tcp syn-check
Default
A non-SYN packet that is the first packet over a TCP connection is not dropped.
Views
ASPF policy view
Default command level
2: System level
374