568
Parameters
dns: Specifies the DNS client verification function.
http: Specifies the HTTP client verification function.
tcp: Specifies the TCP client verification function.
destination-ip-address: Specifies the IPv4 address to be protected. All connection requests destined for
this address are verified by the client verification function.
vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance to which the specified IPv4 address
belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. Do not specify
this option if the IPv4 address is on the public network.
port port-number: Specifies the port to be protected, in the range of 1 to 65535. If you do not specify this
option, DNS client verification protects port 53, HTTP client verification protects port 80, and TCP client
verification protects all ports.
Usage guidelines
You can specify multiple protected IP addresses by using this command multiple times.
Examples
# Configure TCP client verification to protect IPv4 address 2.2.2.5 and port 25.
<Sysname> system-view
[Sysname] client-verify tcp protected ip 2.2.2.5 port 25
# Configure DNS client verification to protect IPv4 address 2.2.2.5 and port 50.
<Sysname> system-view
[Sysname] client-verify dns protected ip 2.2.2.5 port 50
Related commands
display client-verify protected ip
client-verify protected ipv6
Use client-verify protected ipv6 to specify an IPv6 address to be protected by the client verification
function.
Use undo client-verify protected ipv6 to remove an IPv6 address protected by the client verification
function.
Syntax
client-verify { dns | http | tcp } protected ipv6 destination-ipv6-address [ vpn-instance
vpn-instance-name ] [ port port-number ]
undo client-verify { dns | http | tcp } protected ipv6 destination-ipv6-address [ vpn-instance
vpn-instance-name ] [ port port-number ]
Default
The client verification function does not protect any IPv6 addresses.
Views
System view
To Next Page
Loading...
Need help?
General
