手册下载
14-命令总索引-整本手册_CHM.rar (8.90 MB)
H3C SecPath T1000[T5000][IPS插卡]系列入侵防御系统 命令参考(V7)(R8560_R8660_E8160)-6W603-整本手册.pdf (17.56 MB)
A B C D E F G H I J K L M N O P Q R S T U V W X Y
access-user email authentication
action(CC-defense policy rule view)
anti-virus signature auto-update
anti-virus signature auto-update-now
apply default-output-interface
apply default-output-interface
app-proxy internal-server-certificate delete
app-proxy internal-server-certificate import
app-proxy ssl whitelist activate
app-proxy ssl whitelist predefined-hostname enable
app-proxy ssl whitelist user-defined-hostname
app-proxy ssl-decrypt-certificate delete
app-proxy ssl-decrypt-certificate import
app-proxy ssl-decrypt-certificate modify
apr protocol detect-threshold application-other
archive configuration interval
archive configuration location
archive configuration server password
archive configuration server user
arp ip-unnumbered learning enable
arp restricted-forwarding enable
attack-defense cpu-core action
attack-defense ipcar session-rate-limit enable
attack-defense login block-timeout
attack-defense login max-attempt
attack-defense login reauthentication-delay
attack-defense malformed-packet defend enable
attack-defense signature log non-aggregate
attack-defense top-attack-statistics enable
attribute 182 vendor-id 25506 vlan
attribute convert (RADIUS DAE server view)
attribute convert (RADIUS scheme view)
attribute reject (RADIUS DAE server view)
attribute reject (RADIUS scheme view)
attribute vendor-id 2011 version
authorization-attribute (ISP domain view)
authorization-attribute (Local user view/user group view)
bandwidth { per-ip | per-user }
bandwidth total traffic-quota per-ip monthly
bfd detect-interface first-fail-timer
bfd detect-interface source-ip
bfd detect-interface special-processing
bfd multi-hop authentication-mode
bfd multi-hop destination-port
bfd multi-hop detect-multiplier
bfd multi-hop min-echo-receive-interval
bfd multi-hop min-receive-interval
bfd multi-hop min-transmit-interval
bootrom-update security-check enable
bridge fast-forwarding check-vlan-id
bridge mac-address timer aging
bridge tunnel-encapsulation skip
capability security-policy-rule maximum
certificate-chain-sending enable
ciphersuite server-preferred enable
client-verify dns-reply enable
configuration auto-sync enable
configuration manual-sync-check
configuration replace server file
configuration replace server password
configuration replace server user
context-capability inbound broadcast single
context-capability inbound broadcast total
context-capability inbound drop-logging enable
context-capability inbound multicast single
context-capability inbound multicast total
customlog character-encoding utf-8
cwmp cpe inform interval enable
dac email-server client-authentication enable
dac email-server secure-authentication enable
dac email-server server-address
data-flow-format (HWTACACS scheme view)
data-flow-format (RADIUS scheme view)
debugging-auto-off enable cpu-usage-alarm
default ssl-decrypt protect-mode
description (application group view)
description (data-filter policy view)
description (file-filter policy view)
description (filetype-group view)
description (keyword-group view)
description (security-policy rule view)
description (security-policy view)
description (VPN instance view)
description(CC-defense policy view)
description(waf signature view)
destination-address(CC-defense policy rule view)
destination-address(waf signature rule view)
destination-ip-host (IPv4 security policy view)
destination-ip-host (IPv6 security policy view)
destination-ip-range (IPv4 security policy view)
destination-ip-range (IPv6 security policy view)
destination-ip-subnet (IPv4 security policy view)
destination-ip-subnet (IPv6 security policy view)
destination-port(CC-defense policy rule view)
destination-port(waf signature rule view)
dhcp relay check mac-address aging-time
dhcp relay client-information record
dhcp relay client-information refresh
dhcp relay client-information refresh enable
dhcp relay forward reply by-option82
dhcp relay information circuit-id
dhcp relay information remote-id
dhcp relay information strategy
dhcp server bootp reply-rfc-1048
dhcp server database update interval
dhcp server database update now
dhcp server database update stop
dhcp server relay information enable
dhcp server reply-exclude-option60
display | { begin | exclude | include }
display anti-virus signature family-info
display anti-virus signature library
display application statistics
display application statistics top
display app-proxy imported internal-server-certificate
display app-proxy server-certificate
display app-proxy ssl whitelist { ipv4 | ipv6 }
display app-proxy ssl whitelist hostname
display app-proxy ssl-decrypt-certificate
display apr protocol detection-threshold-other
display arp detection statistics
display arp source-suppression
display attack-defense cpu-core flow info
display attack-defense flood statistics ip
display attack-defense flood statistics ipv6
display attack-defense http-slow-attack statistics ip
display attack-defense http-slow-attack statistics ip
display attack-defense http-slow-attack statistics ipv6
display attack-defense http-slow-attack statistics ipv6
display attack-defense malformed-packet statistics
display attack-defense policy ip
display attack-defense policy ipv6
display attack-defense scan attacker ip
display attack-defense scan attacker ipv6
display attack-defense statistics security-zone
display attack-defense top-attack-statistics
display blacklist destination-ip
display blacklist destination-ipv6
display bridge cache ip fragment
display client-verify protected ip
display client-verify protected ipv6
display client-verify trusted ip
display client-verify trusted ipv6
display configuration replace server
display connection-limit ipv6-stat-nodes
display connection-limit statistics
display connection-limit stat-nodes
display context capability inbound broadcast
display context capability inbound multicast
display counters interface reth
display counters rate interface reth
display cpu-usage configuration
display crypto-engine statistics
display current-configuration diff
display dhcp relay check mac-address
display dhcp relay client-information
display dhcp relay information
display dhcp relay server-address
display dhcp server statistics
display diagnostic-information
display diagnostic-logfile summary
display inspect md5-verify configuration
display interface vlan-interface
display ip fast-forwarding aging-time
display ip fast-forwarding cache
display ip fast-forwarding fragcache
display ip policy-based-route interface
display ip policy-based-route local
display ip policy-based-route setup
display ip routing-table ip-address
display ip routing-table prefix-list
display ip routing-table protocol
display ip routing-table statistics
display ip routing-table summary
display ip subscriber interface-leased
display ip subscriber interface-leased statistics
display ip subscriber offline statistics
display ip subscriber session statistics
display ip subscriber subnet-leased
display ip subscriber subnet-leased statistics
display ip urpf statistics security-zone
display ip-mac binding statistics
display ip-reputation attack-category
display ip-reputation exception
display ip-reputation signature library
display ip-reputation top-hit-statistics
display ips signature pre-defined
display ips signature user-defined
display ips signature user-defined parse-failed
display ipv6 dhcp client statistics
display ipv6 dhcp option-group
display ipv6 dhcp relay server-address
display ipv6 dhcp relay statistics
display ipv6 dhcp server conflict
display ipv6 dhcp server database
display ipv6 dhcp server expired
display ipv6 dhcp server ip-in-use
display ipv6 dhcp server pd-in-use
display ipv6 dhcp server statistics
display ipv6 fast-forwarding aging-time
display ipv6 fast-forwarding cache
display ipv6 fast-forwarding fragcache
display ipv6 nd attack-suppression configuration
display ipv6 nd attack-suppression per-interface
display ipv6 nd attack-suppression per-interface inteface
display ipv6 nd source-mac configuration
display ipv6 neighbors vpn-instance
display ipv6 policy-based-route
display ipv6 policy-based-route interface
display ipv6 policy-based-route local
display ipv6 policy-based-route setup
display ipv6 rib graceful-restart
display ipv6 route-static routing-table
display ipv6 routing-table acl
display ipv6 routing-table ipv6-address
display ipv6 routing-table prefix-list
display ipv6 routing-table protocol
display ipv6 routing-table statistics
display ipv6 routing-table summary
display ipv6 subscriber interface-leased
display ipv6 subscriber interface-leased statistics
display ipv6 subscriber offline statistics
display ipv6 subscriber session
display ipv6 subscriber session statistics
display ipv6 subscriber subnet-leased
display ipv6 subscriber subnet-leased statistics
display ipv6 urpf statistics security-zone
display irf-port load-sharing mode
display kernel deadloop configuration
display kernel starvation configuration
display link-aggregation load-sharing mode
display link-aggregation load-sharing path
display link-aggregation member-port
display link-aggregation summary
display link-aggregation verbose
display lldp local-information
display lldp neighbor-information
display mac-address aging-time
display mac-address mac-learning
display mac-authentication connection
display mac-forwarding cache ip
display mac-forwarding cache ip fragment
display mac-forwarding cache ipv6
display mac-forwarding statistics
display ntp-service ipv6 sessions
display ospf fast-reroute lfa-candidate
display ospf non-stop-routing status
display ospfv3 graceful-restart
display ospfv3 non-stop-routing
display packet-filter statistics
display password-control blacklist
display pki certificate access-control-policy
display pki certificate attribute-group
display pki certificate domain
display pki certificate renew-status
display pki certificate request-status
display port-mapping pre-defined
display port-mapping user-defined
display process memory heap address
display process memory heap size
display public-key local public
display remote-backup-group status
display remote-backup-group sync-check
display ripng graceful-restart
display ripng non-stop-routing
display route-static routing-table
display security-logfile summary
display security-policy statistics
display session aging-time application
display session aging-time state
display session fast-drop statistics
display session fast-drop table ipv4
display session fast-drop table ipv6
display session fast-drop top-statistics
display session relation-table
display session statistics ipv4
display session statistics ipv6
display session statistics multicast
display session table multicast ipv4
display session table multicast ipv6
display session top-statistics
display session-based netstream aggregation-cache
display snmp mib event object list
display snmp mib event summary
display snmp mib event trigger
display snmp-agent local-engineid
display snmp-agent trapbuffer drop
display snmp-agent trapbuffer send
display snmp-server arp-sync table
display traffic-policy statistics bandwidth
display traffic-policy statistics connection-limit
display traffic-policy statistics rule-hit
display url-filter signature library
display url-reputation attack-category
display url-reputation signature library
display user-identity active-user-group
display user-identity online-user
display user-identity restful-server
display user-identity security-manage-server
display user-identity user-import-policy
display waf signature pre-defined
display waf signature user-defined
display whitelist object-group
dns-reply-flood detect non-specific
dns-reply-flood source-threshold
domain-delimiter search-direction
enable out-of-band-resynchronization
event (Trigger-existence view)
expect { failed-data | hex-failed-data }
file-filter false-extension action
ftp server acl-deny-log enable
graceful-restart helper enable
graceful-restart helper enable
graceful-restart helper strict-lsa-checking
graceful-restart helper strict-lsa-checking
gratuitous-arp mac-change retransmit
gratuitous-arp-learning enable
http-flood detect non-specific
http-slow-attack detect non-specific
icmp-flood detect non-specific
icmpv6-flood detect non-specific
include-attribute h3c-dhcp-option
info-center diagnostic-logfile directory
info-center diagnostic-logfile enable
info-center diagnostic-logfile frequency
info-center diagnostic-logfile quota
info-center logfile module alarm-threshold
info-center logfile size-quota
info-center logging suppress duplicates
info-center logging suppress module
info-center loghost locate-info with-sn
info-center security-logfile alarm-threshold
info-center security-logfile directory
info-center security-logfile enable
info-center security-logfile frequency
info-center security-logfile size-quota
info-center syslog trap buffersize
info-center syslog utf-8 enable
info-center trace-logfile quota
inspect block-source parameter-profile
inspect capture parameter-profile
inspect email parameter-profile
inspect file-fixed-length enable
inspect logging parameter-profile
inspect md5-fixed-length enable
inspect real-ip detect-field priority
inspect real-ip detect-field tcp-option
inspect real-ip detect-field xff
inspect record-filename nfs maximum
inspect redirect parameter-profile
inspect signature auto-update proxy
inspect source-port-identify enable
inspect stream-fixed-length disable
inspect tcp-reassemble max-segment
inspect waf http-log-details enable
inspect warning parameter-profile
ip fast-forwarding load-sharing
ip https certificate access-control-policy
ip load-sharing local-first enable
ip route-static default-preference
ip route-static fast-reroute auto
ip route-static primary-path-detect bfd echo
ip subscriber access-user log enable
ip subscriber dhcp max-session
ip subscriber dhcp password option60
ip subscriber initiator dhcp enable
ip subscriber initiator unclassified-ip enable
ip subscriber interface-leased
ip subscriber nas-port-id format
ip subscriber nas-port-id nasinfo-insert
ip subscriber service-identify
ip subscriber unclassified-ip domain
ip subscriber unclassified-ip max-session
ip subscriber unclassified-ip username
ip subscriber whitelist enable
ip virtual-reassembly centralize
ip virtual-reassembly suppress
ip-mac binding no-match action deny
ip-reputation signature auto-update
ip-reputation signature auto-update-now
ip-reputation signature rollback
ip-reputation signature update
ipv6 dhcp client stateless enable
ipv6 dhcp relay server-address
ipv6 dhcp server database filename
ipv6 dhcp server database update interval
ipv6 dhcp server database update now
ipv6 dhcp server database update stop
ipv6 dhcp server forbidden-address
ipv6 dhcp server forbidden-prefix
ipv6 extension-header drop enable
ipv6 fast-forwarding aging-time
ipv6 fast-forwarding load-sharing
ipv6 icmpv6 multicast-echo-reply enable
ipv6 nd attack-suppression enable per-interface
ipv6 nd attack-suppression threshold
ipv6 nd autoconfig managed-address-flag
ipv6 nd ra dns search-list suppress
ipv6 nd ra dns server suppress
ipv6 nd ra hop-limit unspecified
ipv6 nd unsolicited-na-learning enable
ipv6 neighbor link-local minimize
ipv6 neighbors max-learning-num
ipv6 policy-based-route (interface view)
ipv6 policy-based-route (system view)
ipv6 route-static default-preference
ipv6 subscriber access-user log enable
ipv6 subscriber dhcp max-session
ipv6 subscriber dhcp password option16
ipv6 subscriber initiator dhcp enable
ipv6 subscriber initiator ndrs enable
ipv6 subscriber initiator unclassified-ip enable
ipv6 subscriber interface-leased
ipv6 subscriber nas-port-id format
ipv6 subscriber nas-port-id nasinfo-insert
ipv6 subscriber ndrs max-session
ipv6 subscriber service-identify
ipv6 subscriber session static
ipv6 subscriber unclassified-ip domain
ipv6 subscriber unclassified-ip max-session
ipv6 subscriber unclassified-ip username
ipv6 subscriber whitelist enable
ipv6 virtual-reassembly centralize
ipv6 virtual-reassembly suppress
irf-port global load-sharing mode
lacp default-selected-port disable
license activation-file install
link-aggregation forwarding-acceleration enable
link-aggregation global forwarding-acceleration enable
link-aggregation global load-sharing mode
link-aggregation lacp traffic-redirect-notification enable
link-aggregation load-sharing mode
link-aggregation load-sharing mode local-first
link-aggregation port-priority
link-aggregation selected-port maximum
link-aggregation selected-port minimum
lldp ignore-pvid-inconsistency
lldp management-address-format string
lldp notification med-topology-change enable
lldp notification remote-change enable
lldp timer notification-interval
local-server log change-password-prompt
loopback-detection global action
loopback-detection global enable
loopback-detection interval-time
mac fast-forwarding check-vlan-id
mac-address mac-learning enable
mac-address mac-learning priority
mac-address max-mac-count enable-forwarding
mac-authentication access-user log enable
mac-authentication critical vlan
mac-authentication guest-vlan auth-period
mac-authentication host-mode multi-vlan
mac-authentication re-authenticate server-unreachable keep-online
mac-authentication user-name-format
monitor cpu-usage statistics-interval core
monitor kernel deadloop action threshold
monitor kernel deadloop enable
monitor kernel deadloop exclude-thread
monitor kernel starvation enable
monitor kernel starvation exclude-thread
monitor kernel starvation time
monitor resend cpu-usage core-interval
monitor resource-usage { bridge-aggregation | route-aggregation } threshold
monitor resource-usage bandwidth inbound threshold
monitor resource-usage blade-controller-team context
monitor resource-usage context threshold
monitor resource-usage security-policy threshold
monitor resource-usage session-count threshold
monitor resource-usage session-rate threshold
netconf capability specific-namespace
netconf soap https ssl-server-policy
network (IPv4 address object group view)
network (IPv6 address object group view)
network exclude (IPv4 address object group view)
network exclude (IPv6 address object group view)
ntp-service authentication enable
ntp-service authentication-keyid
ntp-service ipv6 inbound enable
ntp-service ipv6 multicast-client
ntp-service ipv6 multicast-server
ntp-service ipv6 unicast-server
ntp-service max-dynamic-sessions
ntp-service reliable authentication-keyid
ntp-service time-offset-threshold
object list (Action-notification view)
object list (Trigger-boolean view)
object list (Trigger-existence view)
object list (Trigger-threshold view)
oid (Action-notification view)
operation (FTP operation view)
operation (HTTP operation view)
operation (HTTPS template view)
ospfv3 fast-reroute lfa-backup exclude
ospfv3 primary-path-detect bfd
packet-capture max-file-packets
password (Device management user view)
password-control { aging | composition | history | length } enable
password-control alert-before-expire
password-control blacklist user-info username-only
password-control change-password first-login enable
password-control change-password weak-password enable
password-control expired-user-login
password-control login idle-time
password-control login-attempt
password-control per-user blacklist-limit
password-control super composition
password-control update-interval
per-ip bandwidth-threshold max-value
per-ip bandwidth-threshold min-value
per-ip bandwidth-threshold-detect enable
per-ip bandwidth-threshold-learn duration
per-ip bandwidth-threshold-learn enable
per-ip bandwidth-threshold-learn tolerance max-value
per-ip bandwidth-threshold-learn tolerance min-value
pki certificate access-control-policy
pki certificate attribute-group
pki certificate logging enable
pki-domain (SSL client policy view)
pki-domain (SSL server policy view)
primary accounting (HWTACACS scheme view)
primary accounting (RADIUS scheme view)
primary authentication (HWTACACS scheme view)
primary authentication (RADIUS scheme view)
radius authentication-request first
reaction checked-element { jitter-ds | jitter-sd }
reaction checked-element { owd-ds | owd-sd }
reaction checked-element icpif
reaction checked-element packet-loss
reaction checked-element probe-duration
reaction checked-element probe-fail (for trap)
reaction checked-element probe-fail (for trigger)
rename (URL filtering category view)
rename (URL filtering policy view)
reset app-proxy server-certificate
reset app-proxy ssl whitelist ip
reset arp detection statistics
reset attack-defense malformed-packet statistics
reset attack-defense policy flood
reset attack-defense statistics security-zone
reset attack-defense top-attack-statistics
reset blacklist destination-ip
reset blacklist destination-ipv6
reset client-verify protected statistics
reset connection-limit statistics
reset context capability inbound broadcast
reset context capability inbound multicast
reset counters interface loopback
reset crypto-engine statistics
reset dhcp relay client-information
reset dns snooping log statistics
reset install log-history oldest
reset ip fast-forwarding cache
reset ip policy-based-route statistics
reset ip routing-table statistics protocol
reset ip subscriber offline statistics
reset ip urpf statistics security-zone
reset ip-mac binding statistics
reset ipv6 dhcp client statistics
reset ipv6 dhcp relay statistics
reset ipv6 dhcp server conflict
reset ipv6 dhcp server expired
reset ipv6 dhcp server ip-in-use
reset ipv6 dhcp server pd-in-use
reset ipv6 dhcp server statistics
reset ipv6 fast-forwarding cache
reset ipv6 nd attack-suppression per-interface
reset ipv6 nd attack-suppression per-interface statistics
reset ipv6 policy-based-route statistics
reset ipv6 routing-table statistics protocol
reset ipv6 subscriber offline statistics
reset ipv6 urpf statistics security-zone
reset mac-authentication access-user
reset mac-authentication critical-vlan
reset mac-authentication guest-vlan
reset mac-authentication statistics
reset mac-forwarding statistics
reset netconf service statistics
reset netconf session statistics
reset packet-filter statistics
reset password-control blacklist
reset password-control history-record
reset security-policy statistics
reset session statistics multicast
reset session table multicast ipv4
reset session table multicast ipv6
reset snmp-server arp-sync table
reset traffic-policy statistics bandwidth
reset traffic-policy statistics connection-limit
reset traffic-policy statistics rule-hit
reset user-identity dynamic-online-user
reset user-identity user-account
reset user-identity user-group
resource-release { data-fill | hex-data-fill }
restful https ssl-server-policy
ripng primary-path-detect bfd echo
secondary accounting (HWTACACS scheme view)
secondary accounting (RADIUS scheme view)
secondary authentication (HWTACACS scheme view)
secondary authentication (RADIUS scheme view)
security-policy config-logging send-time
security-zone intra-zone default permit
server-block-action (HWTACACS scheme view)
service(service object group view)
service-type (Local user view)
session aging-time application
session alarm rate-abrupt enable
session alarm rate-abrupt threshold
session alarm try-rate-abrupt enable
session alarm try-rate-abrupt threshold
session alarm usage-abrupt enable
session alarm usage-abrupt threshold
session fast-drop resource-ratio
session fast-drop top-statistics enable
session log { bytes-active | packets-active }
session-based netstream aggregation
session-based netstream enable
session-based netstream export host
session-based netstream export source ip
session-based netstream timeout
session-time include-idle-time
severity-level(ips policy view)
severity-level(ips signature view)
severity-level(waf policy view)
severity-level(waf signature view)
signature { large-icmp | large-icmpv6 } max-length
snmp mib event sample instance maximum
snmp-agent { inform | trap } source
snmp-agent trap enable event-mib
snmp-agent trap enable mac-address
snmp-agent trap if-mib link extended
snmp-agent usm-user { v1 | v2c }
snmp-agent usm-user v3 user-role
snmp-server arp-sync { interval | timeout } *
snmp-server arp-sync target-host
sntp reliable authentication-keyid
source-address(ips user-defined signature view)
source-address(ips whitelist view)
source-ip-host (IPv4 security policy view)
source-ip-host (IPv6 security policy view)
source-ip-range (IPv4 security policy view)
source-ip-range (IPv6 security policy view)
source-ip-subnet (IPv4 security policy view)
source-ip-subnet (IPv6 security policy view)
ssh server acl-deny-log enable
ssh server authentication-retries
ssh server authentication-timeout
ssh server compatible-ssh1x enable
startup (Trigger-existence view)
startup (Trigger-threshold view)
statistics connection-limit enable
statistics signature-hit enable
syn-ack-flood detect non-specific
syn-ack-flood source-threshold
telnet server acl-deny-log enable
threshold-learn auto-apply enable
threshold-learn tolerance-value
timer quiet (HWTACACS scheme view)
timer quiet (RADIUS scheme view)
timer realtime-accounting (HWTACACS scheme view)
timer realtime-accounting (RADIUS scheme view)
timer response-timeout (HWTACACS scheme view)
timer response-timeout (RADIUS scheme view)
track list threshold percentage
url-filter log except pre-defined
url-filter log except user-defined
url-filter signature auto-update
url-filter signature auto-update-now
url-reputation signature auto-update
url-reputation signature auto-update-now
url-reputation signature rollback
url-reputation signature update
user-identity online-user import policy
user-identity online-user-name-match
user-identity security-manage-server
user-identity user-account auto-import policy
user-identity user-account export url
user-identity user-account import policy
user-identity user-account import url
user-identity user-import-policy
user-name-format (HWTACACS scheme view)
user-name-format (RADIUS scheme view)
version (HTTP/HTTPS operation view and HTTPS template view)
version (SNMP-DCA template view)
vpn-instance (HWTACACS scheme view)
vpn-instance (RADIUS scheme view)
web https-authorization username
wildcard context (Action-set view)
wildcard context (Trigger view)