2-11
For more information about the
snmp-agent trap enable
command, see
SNMP
in the
Network
Management and Monitoring Command Reference
.
Displaying and Maintaining ACFP
To do…
Use the command…
Remarks
Display the configuration
information of the ACFP server
display acfp server-info
Display the configuration
information of an ACFP client
display acfp client-info
[
client-id
]
Display the configuration
information of an ACFP policy
display acfp policy-info
[
client
client-id
[
policy-index
] |
dest-interface
interface-type interface-number
|
in-interface
interface-type
interface-number
|
out-interface
interface-type interface-number
] [
active
|
inactive
]
Display ACFP rule configuration
information
display acfp rule-info
{
in-interface
[
interface-type interface-number
] |
out-interface
[
interface-type
interface-number
] |
policy
[
client-id
policy-index
] }
Display ACFP rule cache
configuration information
display acfp rule-cache
[
in-interface
interface-type interface-number
|
out-interface
interface-type
interface-number
] *
Display the configuration
information of ACFP Trap
display snmp-agent trap-list
Available in any view
ACFP Configuration Example
Network Requirements
z
As shown in
, different departments are interconnected on the intranet through Router
(ACFP server).
z
ACFP client is connected to Router to control traffic on Router and analyzes traffic on the inbound
interface GigabitEthernet 1/2. After the traffic analysis by the ACFP client, all packets with the
inbound interface being GigabitEthernet 3/0//2 and source IP address being 192.168.1.1/24 are
permitted and all packets with the inbound interface being GigabitEthernet 3/0//2 and source IP
address being 192.168.1.2/24 are denied.
