657
ASPF commands
Commands and descriptions for centralized devices apply to the following routers:
•
MSR1002-4/1003-8S.
•
MSR2003.
•
MSR2004-24/2004-48.
•
MSR3012/3024/3044/3064.
•
MSR954 (JH296A/JH297A/JH298A/JH299A/JH373A).
•
MSR958 (JH300A/JH301A).
Commands and descriptions for distributed devices apply to MSR4060 and MSR4080 routers.
aspf apply policy (interface view)
Use
aspf apply policy
to apply an ASPF policy to an interface.
Use
undo aspf apply policy
to remove an ASPF policy application from an interface.
Syntax
aspf apply policy aspf-policy-number
{
inbound
|
outbound
}
undo aspf apply policy
aspf-policy-number
{
inbound
|
outbound
}
Default
No ASPF policy is applied to an interface.
Views
Interface view
Predefined user roles
network-admin
Parameters
aspf-policy-number
: Specifies an ASPF policy number. The value range for this argument is 1 to 256.
inbound
: Applies the ASPF policy to incoming packets.
outbound
: Applies the ASPF policy to outgoing packets.
Usage guidelines
To inspect the traffic through an interface, you must apply a configured ASPF policy to that interface.
Make sure a connection initiation packet and the response packet pass through the same interface,
because an ASPF stores and maintains the application layer protocol status based on interfaces.
You can apply an ASPF policy to both the inbound and outbound directions of an interface.
Examples
# Apply ASPF policy 1 to the outbound direction of GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] aspf apply policy 1 outbound
Related commands
aspf policy
Summary of Contents for FlexNetwork MSR Series
Page 1005: ...987 ...
