Hillstone SA系列安全网关命令手册_3.0R5

Hillstone SA系列安全网关命令手册

山石网科通信技术（北京）有限公司

SA5000/2000-CLI0609-3.0R5C-01

Hillstone SA系列安全网关命令手册

关于本手册

本手册为Hillstone SA系列安全网关命令手册。详细描述StoneOS中用到的所有命令，具体内容有命令的格式、使用方法、参数、默认值和使用实例等。

文档约定

在本手册中，StoneOS命令语法描述使用以下约定：

?大括弧（{ }）：指明该内容为必要元素。

?方括弧（[ ]）：指明该内容为可选元素。

?竖线（|）：分隔可选择的互相排斥的选项。

?粗体：粗体部分为命令的关键字，是命令行中不可变部分，用户必须逐字输入。

?斜体：斜体部分为需要用户提供值的参数。

命令实例约定：

?命令实例中需要用户输入部分用粗体标出。

?需要用户提供值的变量用斜体标出。

?命令实例包括不同平台的输出，可能会有些许差别。

Hillstone SA系列安全网关命令手册

I 目录

怎样使用StoneOS CL I (1)

CLI介绍 (1)

命令模式和提示符 (1)

执行模式 (1)

全局配置模式 (1)

子模块配置模式 (1)

CLI命令模式切换 (1)

命令行错误信息提示 (2)

命令行的输入 (2)

命令行的缩写形式 (2)

自动列出命令关键字 (2)

自动补齐命令关键字 (3)

命令行的编辑 (3)

查看历史命令 (3)

快捷键 (3)

过滤CLI输出信息 (4)

分页显示CLI输出信息 (4)

设置终端属性 (5)

设置连接超时时间 (5)

重定向输出 (5)

StoneOS系统管理命令 (6)

access (6)

active (6)

admin (7)

admin host (8)

admin user (8)

arp (9)

clear logging (10)

clock time (11)

clock zone (11)

Hillstone SA 系列安全网关命令手册

II configure ..........................................................................................12 console timeout .................................................................................12 debug...............................................................................................13 delete configuration saved...................................................................14 dst-addr-based-session-counter ...........................................................14 exec console baudrate ........................................................................15 exec customize ..................................................................................15 exec license apply ..............................................................................16 exec license install .............................................................................17 exec license uninstall ..........................................................................17 exit ..................................................................................................18 export configuration ...........................................................................18 export log event.................................................................................19 filter.................................................................................................20 generate-request ...............................................................................21 group ...............................................................................................22 group-by...........................................................................................22 hostname..........................................................................................24 http..................................................................................................24 http port ...........................................................................................25 https port..........................................................................................26 https trust-domain .............................................................................27 ike-id ...............................................................................................27 import configuration ...........................................................................28 import customize ...............................................................................29 import image.....................................................................................30 interface ...........................................................................................31 ip.....................................................................................................31 language...........................................................................................32 logging .............................................................................................33 logging app-identification ....................................................................34 logging alarm to.................................................................................34 logging configuration to.......................................................................35 logging debug to ................................................................................36 logging email to .................................................................................37 logging event to.................................................................................37 logging network to .............................................................................39 logging facility .. (39)

Hillstone SA 系列安全网关命令手册

III logging security to..............................................................................40 logging syslog....................................................................................41 logging traffic to.................................................................................42 match...............................................................................................42 ntp authentication ..............................................................................43 ntp authentication-key ........................................................................44 ntp enable.........................................................................................44 ntp max-adjustment ...........................................................................45 ntp query-interval ..............................................................................45 ntp server .........................................................................................46 password ..........................................................................................47 password （user ）...............................................................................47 password-policy .................................................................................48 ping .................................................................................................48 privilege ...........................................................................................49 reboot ..............................................................................................50 require .............................................................................................51 role ..................................................................................................51 role-expression ..................................................................................52 role-mapping-rule ..............................................................................53 rollback configuration saved.................................................................53 save.................................................................................................54 smtp ................................................................................................55 snmp-server contact...........................................................................55 snmp-server engineID ........................................................................56 snmp-server group.............................................................................56 snmp-server host ...............................................................................57 snmp-server location ..........................................................................58 snmp-server manager.........................................................................59 snmp-server port ...............................................................................59 snmp-server trap-host ........................................................................60 snmp-server user ...............................................................................61 src-addr-based-session-counter ...........................................................62 statistic session-counter ......................................................................62 statistics-set......................................................................................63 ssh port ............................................................................................63 ssh timeout .......................................................................................64 src-addr-based-session-counter .. (65)

Hillstone SA 系列安全网关命令手册

IV statistics app-session..........................................................................65 statistics session-counter zone .............................................................66 stonemanager enable .........................................................................66 stonemanager host.............................................................................67 stonemanager trust-domain.................................................................68 target-data........................................................................................68 telnet authorization-try-count ..............................................................69 telnet connection-interval ....................................................................70 telnet port.........................................................................................70 telnet timeout....................................................................................71 threshold ..........................................................................................71 traceroute .........................................................................................72 track ................................................................................................73 user .................................................................................................74 webauth http .....................................................................................74 webauth http-port ..............................................................................75 webauth https ...................................................................................76 webauth https-port.............................................................................76 webauth timeout ................................................................................77 web timeout ......................................................................................77 系统结构命令 (79)

tcp-mss ............................................................................................79 tcp-seq-check-disable .........................................................................79 tcp-syn-check ....................................................................................80 tcp-syn-bit-check ...............................................................................81 安全网关应用模式 (82)

forward-tagged-packet........................................................................82 l2-nonip-action ..................................................................................82 vswitch .............................................................................................83 域（Zone ）命令. (85)

bind .................................................................................................85 zone.................................................................................................85 接口（Interface ）命令. (87)

aggregate aggregate number ................................................................87 arp timeout .......................................................................................87 authenticated-arp...............................................................................88 backup-interface .. (89)

Hillstone SA 系列安全网关命令手册

V bgroup bgroup number ........................................................................90 clear mac ..........................................................................................90 combo ..............................................................................................91 duplex ..............................................................................................91 interface aggregate number ..................................................................92 interface aggregate number.tag ............................................................93 interface bgroup number ......................................................................93 interface ethernet m /n .........................................................................94 interface ethernetX/Y-pppoeZ ..............................................................94 interface ethernet m /n.tag ...................................................................95 interface loopback number ...................................................................96 interface redundant number .................................................................96 interface redundant number.tag ............................................................97 interface supervlan number ..................................................................97 interface tunnel number .......................................................................98 interface vlan id ..................................................................................99 ip address .........................................................................................99 ip address unnumber ........................................................................100 ip mtu ............................................................................................101 ip ospf network point-to-multipoint .....................................................101 manage ..........................................................................................102 mirror to .........................................................................................103 primary ..........................................................................................104 proxy-arp........................................................................................104 redundant redundant number .............................................................105 reverse-route ..................................................................................106 shutdown ........................................................................................106 speed .............................................................................................107 tunnel.............................................................................................108 webauth auth-arp-prompt .................................................................109 zone...............................................................................................109 地址（Address ）命令 (111)

address ..........................................................................................111 host ...............................................................................................111 ip...................................................................................................112 member..........................................................................................113 range .............................................................................................113 服务（Service ）命令.. (115)

Hillstone SA 系列安全网关命令手册

VI icmp...............................................................................................115 icmp type........................................................................................116 protocol ..........................................................................................116 servgroup .......................................................................................117 service............................................................................................118 service service-name ........................................................................118 tcp | udp.........................................................................................119 tcp | udp application .........................................................................120 策略（Policy ）命令. (121)

action .............................................................................................121 add ................................................................................................121 disable............................................................................................122 dst-addr .........................................................................................123 dst-host..........................................................................................123 dst-ip .............................................................................................124 dst-range........................................................................................125 enable ............................................................................................125 log .................................................................................................126 move..............................................................................................127 policy .............................................................................................127 policy-qos-tag tag ............................................................................128 role ................................................................................................128 rule ................................................................................................129 rule id ............................................................................................130 service............................................................................................131 src-addr..........................................................................................132 src-host ..........................................................................................132 src-ip .............................................................................................133 src-range ........................................................................................134 安全控制命令. (135)

arp-inspection..................................................................................135 arp-inspection rate-limit....................................................................135 arp-inspection trust ..........................................................................136 arp-inspection vlan...........................................................................137 arp-learning ....................................................................................137 behavior-profile ...............................................................................138 bin-type..........................................................................................139 category （内容过滤配置模式）.. (139)

Hillstone SA 系列安全网关命令手册

VII category （类别组配置模式）................................................................140 category-group ................................................................................141 clear arp-spoofing-statistics ...............................................................141 clear dhcp-snooping binding ..............................................................142 contentfilter ....................................................................................143 contentfilter-profile...........................................................................143 dhcp-snooping （BGroup 或者VSwitch 接口）...........................................144 dhcp-snooping （物理接口）.................................................................144 dhcp-snooping rate-limit ...................................................................145 dhcp-snooping vlan ..........................................................................146 exec mac-address dynamic-to-static ...................................................146 exec contentfilter apply .....................................................................147 exec urlfilter apply............................................................................147 export urlfilter-database to ftp server..................................................148 export urlfilter-database to tftp server.................................................149 export urlfilter-database to usb ..........................................................149 ftp .................................................................................................150 gratuitous-arp-send ip ......................................................................151 http................................................................................................152 http-profile......................................................................................152 http category-group .........................................................................153 import urlfilter-database from ftp server..............................................154 import urlfilter-database from tftp server.............................................154 import urlfilter-database from usb ......................................................155 keyword..........................................................................................155 mac-address-static ...........................................................................156 mac-learning ...................................................................................157 msn ...............................................................................................157 object.............................................................................................158 popo ..............................................................................................159 profile-group ...................................................................................159 profile-group ...................................................................................160 qq..................................................................................................161 skype .............................................................................................161 taobao............................................................................................162 uc ..................................................................................................163 urlfilter ...........................................................................................163 urlfilter domain-only . (164)

Hillstone SA 系列安全网关命令手册

VIII urlfilter rule type blacklist ..................................................................165 urlfilter rule type keyword .................................................................165 urlfilter rule type whitelist..................................................................166 urlfilter unlimit-ip .............................................................................166 urlfilter unlimit-ip .............................................................................167 urlfilter whitelist-only........................................................................168 web-surfing-record ...........................................................................168 ymsg..............................................................................................169 认证与授权命令. (170)

aaa-server ......................................................................................170 admin auth-server............................................................................170 auth-method ...................................................................................171 backup1..........................................................................................172 backup2..........................................................................................172 base-dn ..........................................................................................173 debug aaa.......................................................................................173 group-class .....................................................................................174 host ...............................................................................................175 login-dn ..........................................................................................175 login-password ................................................................................176 member-attribute.............................................................................177 naming-attribute..............................................................................177 port................................................................................................178 radius port ......................................................................................178 radius secret ...................................................................................179 retries ............................................................................................179 role-mapping-rule ............................................................................180 timeout...........................................................................................181 网络地址转换（NAT ）命令. (182)

dnatrule..........................................................................................182 dnatrule move .................................................................................183 expanded-port-pool ..........................................................................184 nat.................................................................................................185 no dnatrule id ..................................................................................185 no snatrule id ..................................................................................186 snatrule ..........................................................................................186 snatrule move (188)

Hillstone SA 系列安全网关命令手册

IX 应用层识别与控制命令 (189)

alg .................................................................................................189 alg h323 session-time.......................................................................189 IPSec 协议命令. (191)

anti-replay ......................................................................................191 authentication .................................................................................191 auto-connect ...................................................................................192 connection-type ...............................................................................193 df-bit..............................................................................................193 dpd ................................................................................................194 encryption (P1)................................................................................195 encryption (manual).........................................................................195 encryption (P2)................................................................................196 encryption-key.................................................................................197 group (P1)......................................................................................198 group (P2)......................................................................................198 hash (P1)........................................................................................199 hash (manual).................................................................................199 hash (P2)........................................................................................200 hash-key.........................................................................................201 id...................................................................................................201 interface .........................................................................................202 ipsec proposal..................................................................................203 ipsec-proposal .................................................................................203 isakmp peer ....................................................................................204 isakmp-peer ....................................................................................205 isakmp proposal...............................................................................205 isakmp-proposal ..............................................................................206 lifesize............................................................................................206 lifetime (P1)....................................................................................207 lifetime （P2）..................................................................................208 local-id ...........................................................................................208 mode （协商模式）............................................................................209 mode （操作模式）............................................................................210 nat-traversal ...................................................................................210 peer ...............................................................................................211 peer-id ...........................................................................................211 pre-share. (212)

Hillstone SA 系列安全网关命令手册

X protocol ..........................................................................................213 spi .................................................................................................213 trust-domain ...................................................................................214 tunnel ipsec name auto .....................................................................215 tunnel ipsec name manual .................................................................215 type ...............................................................................................216 Secure Connect VPN 命令.. (217)

aaa-server ......................................................................................217 anti-replay ......................................................................................217 address ..........................................................................................218 allow-multi-logon .............................................................................219 allow-multi-logon number..................................................................219 client-auth-trust-domain ...................................................................220 client-cert-authentication ..................................................................221 df-bit..............................................................................................221 dns ................................................................................................222 exec scvpn approve-binding...............................................................222 exec scvpn clear-binding ...................................................................223 exec scvpn increase-host-binding .......................................................224 exec scvpn kickout ...........................................................................224 exec scvpn no-host-binding-check ......................................................225 exec scvpn no-user-binding-check ......................................................226 export scvpn user-host-binding ..........................................................226 https-port .......................................................................................227 idle-time .........................................................................................228 import pki cacert..............................................................................228 import scvpn user-host-binding ..........................................................229 interface .........................................................................................230 pool ...............................................................................................231 scvpn pool.......................................................................................231 scvpn-udp-port ................................................................................232 split-tunnel-route .............................................................................233 ssl-protocol .....................................................................................233 trust-domain ...................................................................................234 tunnel-cipher encryption ...................................................................235 tunnel scvpn....................................................................................235 tunnel scvpn....................................................................................236 user-host-verify . (237)

Hillstone SA 系列安全网关命令手册

XI wins ...............................................................................................237 拨号VPN 命令 (239)

exec generate-user-key rootkey .........................................................239 generate-route ................................................................................240 ike_id .............................................................................................240 user ...............................................................................................241 PnPVPN 命令 (242)

dhcp-pool-address............................................................................242 dhcp-pool-gateway...........................................................................242 dhcp-pool-netmask...........................................................................243 dns ................................................................................................244 peer_id fqdn....................................................................................244 split-tunnel-route .............................................................................245 user ...............................................................................................246 wins ...............................................................................................246 GRE 命令 (248)

destination ......................................................................................248 interface .........................................................................................248 next-tunnel ipsec .............................................................................249 source ............................................................................................249 tunnel gre .......................................................................................250 攻击防护命令. (252)

ad all..............................................................................................252 ad arp-spoofing ...............................................................................252 ad dns-query-flood ...........................................................................254 ad huge-icmp-pak ............................................................................255 ad icmp-flood ..................................................................................256 ad ip-directed-broadcast ...................................................................257 ad ip-fragment.................................................................................257 ad ip-option.....................................................................................258 ad ip-spoofing..................................................................................259 ad ip-sweep.....................................................................................259 ad land-attack .................................................................................260 ad ping-of-death ..............................................................................261 ad port-scan....................................................................................262 ad session-limit................................................................................263 ad syn-flood (264)

Hillstone SA 系列安全网关命令手册

XII ad syn-proxy ...................................................................................266 ad tcp-anomaly................................................................................267 ad tear-drop ....................................................................................268 ad udp-flood....................................................................................268 ad winnuke .....................................................................................269 ad tear-drop ....................................................................................270 clear ad zone...................................................................................271 session-limit-mode ip max.................................................................271 交换命令. (273)

bridge priority..................................................................................273 enable ............................................................................................273 forward-delay ..................................................................................274 hello...............................................................................................274 interface supervlan number ................................................................275 interface vlan id ................................................................................276 maximum-age .................................................................................276 stp .................................................................................................277 stp cost ..........................................................................................277 stp enable .......................................................................................278 stp priority ......................................................................................279 subvlan...........................................................................................279 supervlan supervlan X ........................................................................280 switchmode .....................................................................................280 vlan ...............................................................................................281 路由命令. (283)

aggregate-address ...........................................................................283 area authentication ..........................................................................283 area default-cost..............................................................................284 area range ......................................................................................285 area stub ........................................................................................285 area virtual-link ...............................................................................286 area virtual-link authentication...........................................................287 auto-cost reference-bandwidth...........................................................288 bind pbr-policy.................................................................................289 clear ip bgp .....................................................................................289 default-information originate..............................................................290 default-information originate..............................................................291 default-metric. (291)

Hillstone SA 系列安全网关命令手册

XIII default-metric （BGP ）.......................................................................292 description ......................................................................................293 disable............................................................................................293 distance （BGP ）...............................................................................294 distance..........................................................................................294 distance..........................................................................................295 distance ospf ...................................................................................296 dst-addr .........................................................................................296 dst-host..........................................................................................297 dst-ip .............................................................................................298 dst-range........................................................................................298 ecmp enable....................................................................................299 ecmp-route-select ............................................................................300 enable ............................................................................................300 exec isp-network clear-predefine ........................................................301 match.............................................................................................301 match id .........................................................................................302 move..............................................................................................303 neighbor （BGP ）..............................................................................304 neighbor A.B.C.D peer-group .............................................................304 neighbor {A.B.C.D | peer-group} activate............................................305 neighbor {A.B.C.D | peer-group} default-originate................................306 neighbor {A.B.C.D | peer-group} description .......................................306 neighbor {A.B.C.D | peer-group} next-hop-self ....................................307 neighbor {A.B.C.D | peer-group} remote-as ........................................307 neighbor {A.B.C.D | peer-group} shutdown .........................................308 neighbor {A.B.C.D | peer-group} timers..............................................309 neighbor （RIP ）...............................................................................310 next-hop.........................................................................................310 network （BGP ）...............................................................................311 network （RIP ）................................................................................311 network area ...................................................................................312 ip ospf authentication .......................................................................313 ip ospf authentication-key .................................................................313 ip ospf cost .....................................................................................314 ip ospf dead-interval.........................................................................314 ip ospf hello-interval .........................................................................315 ip ospf message-digest-key (316)

Hillstone SA 系列安全网关命令手册

XIV ip ospf priority .................................................................................316 ip ospf retransmit-interval .................................................................317 ip ospf transmit-delay .......................................................................317 ip rip authentication mode .................................................................318 ip rip authentication string.................................................................319 ip rip receive version ........................................................................319 ip rip send version............................................................................320 ip rip split-horizon ............................................................................321 ip route ..........................................................................................321 ip route isp-name .............................................................................322 ip route source ................................................................................323 ip route source in-interface................................................................324 ip vrouter........................................................................................325 isp-network .....................................................................................326 passive-interface..............................................................................326 pbr-policy .......................................................................................327 redistribute （BGP ）..........................................................................328 redistribute （RIP ）...........................................................................328 redistribute （OSPF ）.........................................................................329 router bgp.......................................................................................330 router ospf ......................................................................................330 router rip ........................................................................................331 router-id （BGP ）.............................................................................332 router-id （OSPF ）...........................................................................332 service............................................................................................333 src-addr..........................................................................................333 src-host ..........................................................................................334 src-ip .............................................................................................335 src-range ........................................................................................335 subnet ............................................................................................336 timers ............................................................................................337 timers basic.....................................................................................337 timers spf .......................................................................................338 version ...........................................................................................339 网络参数命令. (340)

ac ..................................................................................................340 address ..........................................................................................340 authentication (341)

Hillstone SA 系列安全网关命令手册

XV auto-config interface.........................................................................341 auto-connect ...................................................................................342 clear host........................................................................................343 ddns enable.....................................................................................343 ddns name ......................................................................................344 dhcp-client dns admin-preference.......................................................345 dhcp-client ip...................................................................................345 dhcp-client route..............................................................................346 dhcp-relay enable ............................................................................346 dhcp-relay server .............................................................................347 dhcp-server enable...........................................................................347 dhcp-server pool ..............................................................................348 dns ................................................................................................349 dns admin-preference .......................................................................349 dns-proxy .......................................................................................350 domain ...........................................................................................350 gateway..........................................................................................351 exclude address ...............................................................................351 idle-interval.....................................................................................352 ip address dhcp................................................................................353 ip address pppoe..............................................................................353 ip domain lookup..............................................................................354 ip domain name ...............................................................................354 ip domain retry ................................................................................355 ip domain timeout ............................................................................355 ip host............................................................................................356 ip name-server ................................................................................357 ip dns-proxy domain.........................................................................357 ipmac-bind ......................................................................................358 lease ..............................................................................................359 maxupdate interval ..........................................................................359 minupdate interval ...........................................................................360 netmask （DHCP ）............................................................................360 netmask （PPPoE ）............................................................................361 news ..............................................................................................362 pop3..............................................................................................362 pppoe enable group..........................................................................363 pppoe-client group (363)

Hillstone SA 系列安全网关命令手册

XVI pppoe-client group ...........................................................................364 relay-agent .....................................................................................365 route ..............................................................................................365 server.............................................................................................366 schedule .........................................................................................366 service............................................................................................367 smtp ..............................................................................................368 static-ip ..........................................................................................369 type ...............................................................................................369 user （DDNS ）..................................................................................370 user （PPPoE ）.................................................................................370 wins ...............................................................................................371 QoS 管理命令 (372)

bandwidth .......................................................................................372 class ..............................................................................................372 class-map .......................................................................................373 flex-qos ..........................................................................................374 flex-qos low-water-mark ...................................................................374 flex-qos max-bandwidth....................................................................375 flex-qos-up-rate...............................................................................376 ip-qos.............................................................................................376 match application.............................................................................377 match cos .......................................................................................378 match dscp .....................................................................................378 match ip-range ................................................................................380 match policy-qos-tag ........................................................................380 match precedence ............................................................................381 match-priority .................................................................................382 police .............................................................................................382 priority ...........................................................................................384 qos-profile ......................................................................................384 qos-profile ......................................................................................385 random-detect.................................................................................386 set cos............................................................................................386 set dscp..........................................................................................387 set ip-qos-priority ............................................................................388 set precedence ................................................................................388 shape (389)

Hillstone SA 系列安全网关命令手册

XVII PKI 配置命令 (390)

crl..................................................................................................390 crl configure ....................................................................................390 enrollment ......................................................................................391 export pki （PKI 信任域信息）..............................................................391 export pki （本地证书）......................................................................392 import pki （PKI 信任域信息）..............................................................393 import pki （本地证书）......................................................................394 keypair ...........................................................................................395 pki authenticate ...............................................................................396 pki crl request .................................................................................397 pki enroll ........................................................................................397 pki export .......................................................................................398 pki import .......................................................................................398 pki import pkcs12............................................................................399 pki key generate ..............................................................................399 pki key zeroize.................................................................................400 pki key zeroize noconfirm ..................................................................401 pki refresh ......................................................................................401 pki trust-domain ..............................................................................402 subject commonname.......................................................................402 subject country ................................................................................403 subject localityname .........................................................................403 subject organization .........................................................................404 subject organizationunit ....................................................................405 subject stateorprovincename .............................................................405 url..................................................................................................406 高可靠性命令. (407)

arp.................................................................................................407 description ......................................................................................407 exec ha sync ...................................................................................408 ha cluster........................................................................................408 ha group.........................................................................................409 ha link interface ...............................................................................410 ha link ip.........................................................................................410 hello interval ...................................................................................411 hello threshold.................................................................................411 manage ip (412)

Hillstone SA 系列安全网关命令手册

XVIII monitor track...................................................................................413 preempt..........................................................................................413 priority ...........................................................................................414 防病毒命令. (415)

av max-decompression-recursion .......................................................415 av-profile ........................................................................................415 av signature update mode .................................................................416 av signature update schedule.............................................................417 av signature update server ................................................................417 exec av...........................................................................................418 exec av signature update ..................................................................419 file-type..........................................................................................419 import av signature ..........................................................................420 protocol-type...................................................................................421 Show 命令. (423)

show aaa-server ..............................................................................423 show ad zone ..................................................................................423 show address ..................................................................................424 show admin host..............................................................................425 show admin user..............................................................................425 show app logging .............................................................................426 show arp.........................................................................................427 show arp-spoofing-statistics ..............................................................427 show auth-user................................................................................428 show auth-user webauth ...................................................................428 show av signature info ......................................................................429 show behavior-object........................................................................429 show behavior-profile .......................................................................430 show class-map ...............................................................................430 show clock ......................................................................................431 show configuration ...........................................................................432 show configuration saved ..................................................................432 show configuration saved ..................................................................433 show configuration saved record ........................................................433 show console ...................................................................................434 show contentfilter-profile...................................................................434 show contentfilter category................................................................435 show contentfilter category-group (435)

Hillstone SA 系列安全网关命令手册

XIX show contentfilter count ....................................................................436 show contentfilter keyword ................................................................437 show cpu ........................................................................................437 show debug.....................................................................................438 show dhcp-server.............................................................................438 show dhcp-snooping binding ..............................................................439 show dhcp-snooping configuration ......................................................439 show dnat .......................................................................................440 show dns ........................................................................................440 show dns-address ............................................................................441 show dp-filter ip...............................................................................441 show environment............................................................................442 show fib..........................................................................................442 show file .........................................................................................443 show fragment.................................................................................443 show tunnel gre ...............................................................................444 show ha cluster................................................................................444 show ha flow statistics ......................................................................445 show ha group.................................................................................445 show ha link status...........................................................................446 show ha protocol statiscitc.................................................................447 show ha sync state...........................................................................447 show ha sync statistic .......................................................................448 show http........................................................................................449 show http-profile..............................................................................449 show image.....................................................................................450 show interface .................................................................................450 show interface bind-tunnels ...............................................................451 show interface supervlan X .................................................................452 show ip bgp.....................................................................................452 show ip bgp neighbor........................................................................453 show ip bgp paths ............................................................................453 show ip bgp summary.......................................................................454 show ip hosts ..................................................................................454 show ip ospf ....................................................................................455 show ip ospf database.......................................................................455 show ip ospf database.......................................................................456 show ip ospf interface .. (457)

本文来源：https://www.bwwdw.com/article/h37q.html