
l
Run the
display firewall whitelist
{
all
|
ip-address
[
vpn-instance
vpn-instance-name
] |
vpn-instance
vpn-instance-name
} command to view the whitelist entries.
l
Run the
display firewall statistics system
command to view the system-level traffic
statistics.
l
Run the
display firewall statistics zone
zone-name
{
inzone
|
outzone
}
all
command to
view the zone-level traffic statistics and traffic monitoring information.
l
Run the
display firewall statistics zone-ip
zone-name
command to view the status of traffic
monitoring function and session thresholds for each protocol.
l
Run the
display firewall-nat session aging-time
command to view the timeout of entries
in the session table.
l
Run the
display port-mapping
[
dns
|
ftp
|
http
|
rtsp
|
sip
|
port
port-number
] command
to view the mappings between application-layer protocols and ports.
l
Run the
display firewall defend
{
flag
| {
icmp-flood
|
syn-flood
|
udp-flood
} [
ip
[
ip-
address
[
vpn-instance
vpn-instance-name
] ] |
zone
[
zone-name
] ] |
other-attack-type
}
command to view the status and configuration of the attack defense functions.
l
Run the
display firewall log configuration
command to view the global configuration of
the log function.
l
Run the
display firewall session
command to view the session table of the firewall.
----End
3.13.2 Clearing the Firewall Statistics
Context
To view the communication packets of a device within a specified period, you can clear the
previous packet statistics on the device first.
Step 2 and step 3 are optional and can be performed in any sequence. You can select these steps
to clear different types of packet statistics.
Procedure
Step 1
Run:
system-view
The system view is displayed.
Step 2
Run:
clear firewall statistics system
normal
The communication packet statistics are cleared.
Step 3
Run:
clear firewall statistics zone
zone-name
The communication packet statistics in the zone are cleared.
----End
Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security
3 Firewall Configuration
Issue 02 (2012-03-30)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
80