Attack detection and prevention probe commands -- display system internal attack-defense scan stat-nodes ip

Use display system internal attack-defense scan stat-nodes ip to display statistics of an IPv4 statistics node for scanning attack detection and prevention.

Syntax

Centralized devices:

display system internal attack-defense scan stat-nodes ip [ { source | destination } [ ipv4-address [ vpn vpn-instance-name ] ] ] [ interface interface-type interface-number | local ] [ count ]

Distributed devices in standalone mode:Centralized IRF devices:

display system internal attack-defense scan stat-nodes ip [ { source | destination } [ ipv4-address [ vpn vpn-instance-name ] ] ] [ interface interface-type interface-number | local ] [ slot slot-number [ cpu cpu-number ] ] [ count ]

Distributed devices in IRF mode:

display system internal attack-defense scan stat-nodes ip [ { source | destination } [ ipv4-address [ vpn vpn-instance-name ] ] ] [ interface interface-type interface-number | local ] [ chassis chassis-number slot slot-number [ cpu cpu-number ] ] [ count ]

Views

Probe view

Predefined user roles

network-admin

mdc-admin

Parameters

source: Specifies an IPv4 statistics node based on source IPv4 address.

destination: Specifies an IPv4 statistics node based on destination IPv4 address.

ipv4-address: Specifies an IPv4 address. The IPv4 address cannot be a broadcast address, an address on subnet 127.0.0.0/8, a D-class address, or an E-class address.

vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance to which the IPv4 address belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. Do not specify this option if the IPv4 address belongs to the public network.

interface interface-type interface-number: Specifies an interface by its type and number.

local: Specifies the device.

slot slot-number: Specifies a card by its slot number. This option is available only when you specify a global interface, such as a VLAN interface or tunnel interface. If you do not specify a card, this command displays information for all cards. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. This option is available only when you specify a global interface, such as a VLAN interface or tunnel interface. If you do not specify a member device, this command displays information for all member devices. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. This option is available only when you specify a global interface, such as a VLAN interface or tunnel interface. On an IRF fabric, this command displays information for all member devices if you do not specify a member device. On an IRF 3 system, this command displays information for all IRF member devices and PEXs if you do not specify an IRF member device or PEX. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. This option is available only when you specify a global interface, such as a VLAN interface or tunnel interface. If you do not specify a card, this command displays information for all cards. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. This option is available only when you specify a global interface, such as a VLAN interface or tunnel interface. On an IRF fabric, this command displays information for all cards if you do not specify a card. On an IRF 3 system, this command displays information for all cards and PEXs if you do not specify a card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot. Support for this option depends on the device model.

count: Displays the number of matching statistics nodes.

Attack detection and prevention probe commands -- display system internal attack-defense scan stat-nodes ipv6

Use display system internal attack-defense scan stat-nodes ipv6 to display statistics of an IPv6 statistics node for scanning attack detection and prevention.

Syntax

Centralized devices:

display system internal attack-defense scan stat-nodes ipv6 [ { source | destination } [ ipv6-address [ vpn vpn-instance-name ] ] ] [ interface interface-type interface-number | local ] [ count ]

Distributed devices in standalone mode:Centralized IRF devices:

display system internal attack-defense scan stat-nodes ipv6 [ { source | destination } [ ipv6-address [ vpn vpn-instance-name ] ] ] [ interface interface-type interface-number | local ] [ slot slot-number [ cpu cpu-number ] ] [ count ]

Distributed devices in IRF mode:

display system internal attack-defense scan stat-nodes ipv6 [ { source | destination } [ ipv6-address [ vpn vpn-instance-name ] ] ] [ interface interface-type interface-number | local ] [ chassis chassis-number slot slot-number [ cpu cpu-number ] ] [ count ]

Views

Probe view

Predefined user roles

network-admin

mdc-admin

Parameters

source: Specifies an IPv6 statistics node based on source IPv6 address.

destination: Specifies an IPv6 statistics node based on destination IPv6 address.

ipv6-address: Specifies an IPv6 address.

vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance to which the IPv6 address belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. Do not specify this option if the IPv6 address belongs to the public network.

interface interface-type interface-number: Specifies an interface by its type and number.

local: Specifies the device.

slot slot-number: Specifies a card by its slot number. This option is available only when you specify a global interface, such as a VLAN interface or tunnel interface. If you do not specify a card, this command displays information for all cards. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. This option is available only when you specify a global interface, such as a VLAN interface or tunnel interface. If you do not specify a member device, this command displays information for all member devices. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. This option is available only when you specify a global interface, such as a VLAN interface or tunnel interface. On an IRF fabric, this command displays information for all member devices if you do not specify a member device. On an IRF 3 system, this command displays information for all IRF member devices and PEXs if you do not specify an IRF member device or PEX. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. This option is available only when you specify a global interface, such as a VLAN interface or tunnel interface. If you do not specify a card, this command displays information for all cards. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. This option is available only when you specify a global interface, such as a VLAN interface or tunnel interface. On an IRF fabric, this command displays information for all cards if you do not specify a card. On an IRF 3 system, this command displays information for all cards and PEXs if you do not specify a card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot. Support for this option depends on the device model.

count: Displays the number of matching statistics nodes.

Attack detection and prevention probe commands -- display system internal blacklist ip

Use display system internal blacklist ip to display IPv4 blacklist entries.

Syntax

Distributed devices in standalone mode:Centralized IRF devices:

display system internal blacklist ip [ source-ip-address [ vpn-instance vpn-instance-name ] ] [ slot slot-number [ cpu cpu-number ] ] [ count ]

Distributed devices in IRF mode:

display system internal blacklist ip [ source-ip-address [ vpn-instance vpn-instance-name ] ] [ chassis chassis-number slot slot-number [ cpu cpu-number ] ] [ count ]

Views

Probe view

Predefined user roles

network-admin

context-admin

Parameters

source-ip-address: Specifies the IPv4 address for a blacklist entry.

vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance to which the IPv4 address belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays IPv4 blacklist entries for all cards. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays IPv4 blacklist entries for all member devices. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. On an IRF fabric, this command displays IPv4 blacklist entries for all member devices if you do not specify a member device. On an IRF 3 system, this command displays entries for all IRF member devices and PEXs if you do not specify an IRF member device or PEX. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command displays IPv4 blacklist entries for all cards. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. On an IRF fabric, this command displays IPv4 blacklist entries for all cards if you do not specify a card. On an IRF 3 system, this command displays IPv4 blacklist entries for all cards and PEXs if you do not specify a card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot.

count: Displays the number of matching IPv4 blacklist entries.

Attack detection and prevention probe commands -- display system internal blacklist ipv6

Use display system internal blacklist ipv6 to display IPv6 blacklist entries.

Syntax

Distributed devices in standalone mode:Centralized IRF devices:

display system internal blacklist ipv6 [ source-ipv6-address [ vpn-instance vpn-instance-name ] ] [ slot slot-number [ cpu cpu-number ] ] [ count ]

Distributed devices in IRF mode:

display system internal blacklist ipv6 [ source-ipv6-address [ vpn-instance vpn-instance-name ] ] [ chassis chassis-number slot slot-number [ cpu cpu-number ] ] [ count ]

Views

Probe view

Predefined user roles

network-admin

context-admin

Parameters

source-ipv6-address: Specifies the IPv6 address for a blacklist entry.

vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance to which the IPv6 address belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays IPv6 blacklist entries for all cards. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays IPv6 blacklist entries for all member devices. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. On an IRF fabric, this command displays IPv6 blacklist entries for all member devices if you do not specify a member device. On an IRF 3 system, this command displays entries for all IRF member devices and PEXs if you do not specify an IRF member device or PEX. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command displays IPv6 blacklist entries for all cards. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. On an IRF fabric, this command displays IPv6 blacklist entries for all cards if you do not specify a card. On an IRF 3 system, this command displays IPv6 blacklist entries for all cards and PEXs if you do not specify a card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot.

count: Displays the number of matching IPv6 blacklist entries.

Attack detection and prevention probe commands -- display system internal client-verify http redirect-node

| NOTE: Support for this command depends on the device model.

Use display system internal client-verify http redirect-node to display statistics of a redirect node for HTTP client verification.

Syntax

Centralized devices:

display system internal client-verify http redirect-node { ip [ ipv4-address [ vpn ipv4-vpn-instance-name ] ] | ipv6 [ ipv6-address [ vpn ipv6-vpn-instance-name ] ] } [ count ]

Distributed devices in standalone mode:Centralized IRF devices:

display system internal client-verify http redirect-node { ip [ ipv4-address [ vpn ipv4-vpn-instance-name ] ] | ipv6 [ ipv6-address [ vpn ipv6-vpn-instance-name ] ] } [ slot slot-number [ cpu cpu-number ] ] [ count ]

Distributed devices in IRF mode:

display system internal client-verify http redirect-node { ip [ ipv4-address [ vpn ipv4-vpn-instance-name ] ] | ipv6 [ ipv6-address [ vpn ipv6-vpn-instance-name ] ] } [ chassis chassis-number slot slot-number [ cpu cpu-number ] ] [ count ]

Views

Probe view

Predefined user roles

network-admin

mdc-admin

Parameters

ip ipv4-address: Specifies an IPv4 address.

ipv6 ipv6-address: Specifies an IPv6 address.

vpn-instance ipv4-vpn-instance-name: Specifies the MPLS L3VPN instance to which the redirect node belongs. The ipv4-vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. Do not specify this option if the node belongs to the public network.

vpn-instance ipv6-vpn-instance-name: Specifies the MPLS L3VPN instance to which the redirect node belongs. The ipv6-vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. Do not specify this option if the node belongs to the public network.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays redirect node statistics for all cards. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays redirect node statistics for all member devices. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. On an IRF fabric, this command displays redirect node statistics for all member devices if you do not specify a member device. On an IRF 3 system, this command displays redirect node statistics for all IRF member devices and PEXs if you do not specify an IRF member device or PEX. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command displays redirect node statistics for all cards. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. On an IRF fabric, this command displays redirect node statistics for all cards if you do not specify a card. On an IRF 3 system, this command displays redirect node statistics for all cards and PEXs if you do not specify a card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. Support for this option depends on the device model.

count: Displays the number of matching redirect nodes.