Display Aspf All - HP FlexNetwork MSR Series Command Reference Manual

xdmcp: Specifies X Display Manager Control Protocol (XDMCP), an application layer protocol.
action: Specifies an action on the packets that do not pass the protocol status validity check. If you
do not specify an action, ASPF does not perform the protocol status validity check, and it only
maintains connection status information.
drop: Drops the packets that do not pass the protocol status validity check.
logging: Generates log messages for packets that do not pass the protocol status validity check.
Usage guidelines
For multichannel application layer protocols, use this command to ensure the successful
establishment of data connections. Apart from HTTP, SMTP, and TFTP, application layer protocols
supported by this command are all multichannel application layer protocols.
Repeat the detect command to configure ASPF inspection for multiple application protocols.
ASPF inspection for transport layer protocols is always enabled and is not configurable. The
supported transport layer protocols include TCP, UDP, UDP-Lite, SCTP, Raw IP, ICMP, ICMPv6, and
DCCP.
This command configures ASPF inspection for application protocols. ASPF inspection supports
protocol status validity check for application protocols of DNS, FTP, H323, HTTP, SCCP, SIP, and
SMTP. The device deals with packets with invalid protocol status depending on the actions you have
specified. To configure protocol status validity check for an application protocol, you must specify the
action keyword.
Examples
# Configure ASPF inspection for FTP packets.
<Sysname> system-view
[Sysname] aspf policy 1
[Sysname-aspf-policy-1] detect ftp
# Configure ASPF inspection for DNS packets, drop packets that fail protocol status validity check,
and generate log messages for these packets.
<Sysname> system-view
[Sysname] aspf policy 1
[Sysname-aspf-policy-1] detect dns action drop logging
Related commands
display aspf policy

display aspf all

Use display aspf all to display the configuration of all ASPF policies and their applications.
Syntax
display aspf all
Views
Any view
Predefined user roles
network-admin
network-operator
Examples
# Display the configuration of all ASPF policies and their applications.
<Sysname> display aspf all
661