DES-7200 Configuration Guide Chapter 12 NFPP Configuration
12-85
success fail total
------- ---- -----
100 20 120
Meaning: Totally 120 hosts are isolated, including 100 successful hosts and
20 failed hosts.
DES-7200#show nfpp define hosts tcp
Define tcp:
If column 1 shows '*', it means "hardware do not isolate host" .
VLAN interface IP address remain-time(s)
---- -------- --------- -------------
1 Gi0/1 1.1.1.1 110
*2 Gi0/2 1.1.2.1 61
Total:2 host(s)
Note
The above fields mean VLAN ID, port, IP address, MAC
address and remaining time of isolation.
If "*" is displayed before the first column of fine line, it
means that this host is currently subject to software
monitoring or the hardware isolation has failed due to
insufficient resources. When etype is IPv6, source IP
based host isolation users will be displayed in the form of
IPv6 address, and source MAC based host isolation users
will be displayed in the form of MAC address.
12.9.1.11.3 Showing trusted hosts exempt from monitoring
Execute "show nfpp define trusted-host" to display trusted hosts exempt from monitoring.
Command Function
DES-7200#show nfpp define
trusted-host name
Display trusted hosts exempt from
monitoring.
An example is shown below:
DES-7200# show nfpp define trusted-host tcp
Define tcp:
IP address mask
--------- ------
1.1.1.0 255.255.255.0
1.1.2.0 255.255.255.0
Total:2 record(s)