display deception interface

Function

The display deception interface command displays the deception interface information.

Format

display deception interface

Parameters

None

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

You can run this command to view information about all interfaces that participate in deception, including the interface name, VLAN, and election status for detecting IP scanning.

The interfaces whose IP addresses are not in the detected network segment do not detect IP scanning or participate in election.

Example

# Display deception interface information.

<FW> display deception interface
----------------------------------------------------------------------------------------------------------
Current total number = 2                                                        
----------------------------------------------------------------------------------------------------------
name                          ip-address          vlan   election-state   master-ip     vpn-instance 
----------------------------------------------------------------------------------------------------------
GigabitEthernet0/0/0          1.1.1.1              0     master          1.1.1.1         public  
GigabitEthernet0/0/1          2.2.2.2              0     backup          2.2.2.13        aa      
----------------------------------------------------------------------------------------------------------

**Table 1** Description of the **display deception interface** command output
Item	Description
name	Interface name
ip-address	Primary IP address of the interface
vlan	VLAN to which the interface belongs
election-state	Election status of the interface for detecting IP scanning: master: If the device of the interface is elected as the master DecoySensor, it detects IP scanning on the network. backup: If the device of the interface is elected as a backup DecoySensor, it does not detect IP scanning on the network. init: Election is ongoing. --: The interface address is not in the detected network segment, so the interface does not participate in election.
master-ip	IP address of the master DecoySensor on the network segment
vpn-instance	VPN instance of the interface