< Home

display firewall ipv6 topn

Function

The display firewall ipv6 topn command displays top N source or destination IPv6 addresses that have the largest number of sessions or the most traffic.

Format

display firewall ipv6 topn source-ip { session-number | traffic [ interval interval ] } all-systems [ destination ip-address { range start-ipv6-address end-ipv6-address | ipv6-address | top-number number | slot slot-id cpu cpu-id ] *

display firewall ipv6 topn destination-ip { session-number | traffic [ interval interval ] } all-systems [ source ip-address { range start-ipv6-address end-ipv6-address | ipv6-address | top-number number | slot slot-id cpu cpu-id ] *

display firewall ipv6 topn source-ip { session-number | traffic [ interval interval ] } [ vsys vsys-name ] [ destination ip-address { range start-ipv6-address end-ipv6-address | ipv6-address | source-zone zone-name | top-number number | slot slot-id cpu cpu-id ] *

display firewall ipv6 topn destination-ip { session-number | traffic [ interval interval ] } [ vsys vsys-name ] [ source ip-address { range start-ipv6-address end-ipv6-address | ipv6-address | source-zone zone-name | top-number number | slot slot-id cpu cpu-id ] *

Parameters

Parameter Description Value

source-ip

Displays Top N source IPv6 addresses.

-

destination-ip

Displays Top N destination IPv6 addresses.

-

session-number

Displays Top N source or destination IPv6 addresses that have the largest number of sessions.

-

traffic

Displays Top N source or destination IPv6 addresses that have the most traffic.

-

interval

Specifies the traffic statistics interval.

If you do not specify this parameter, the command displays Top N source or destination IPv6 addresses based on the traffic statistics collected within the latest 10s.

The value is an integer ranging from 10 to 300, in seconds. The default value is 10.

all-systems

Displays the ranking result of the root system and all virtual systems.

-

vsys-name

Specifies a virtual system.

If no virtual system is specified, the ranking result of the root system is displayed.

The specified virtual system must already exist.

destination ip-address

Indicates the destination IPv6 address range, used for top N source IPv6 address rankings.

If you do not specify this parameter, the command displays all destination addresses.

-

source ip-address

Indicates the source IPv6 address range, used for top N destination IPv6 address rankings.

If you do not specify this parameter, the command displays all source addresses.

-

start-ipv6-address

Specifies the start IPv6 address.

The value is in hexadecimal notation.

end-ipv6-address

Specifies the end IPv6 address.

The value is in hexadecimal notation.

ipv6-address

Specifies the IPv6 address.

The value is in hexadecimal notation.

zone-name

Specifies the source security zone.

The value must be the name of an existing security zone.

number

Displays first number IPv6 addresses.

If you do not specify this parameter, first 10 IPv6 addresses are displayed.

The value is an integer that ranges from 10 to 50. By default, the value is 10.

slot-id

Specifies the slot ID.Only the USG6635E/6655E, USG6680E and USG6712E/6716E support this parameter.

-

cpu-id

Specifies the ID of CPU.Only the USG6635E/6655E, USG6680E and USG6712E/6716E support this parameter.

-

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

After you run the display firewall ipv6 topn command, the system may not display Top N IPv6 addresses immediately but postpones for a period of time. The latency is affected by the volume of instant messaging traffic. The larger the volume, the longer it takes for the system to collect and display the statistics.

To view the top N ranking result of a specified virtual system, you must set the vsys parameter in the root system. You cannot specify this parameter in the virtual system.

Example

# Check top N session source IPv6 addresses, find the source IPv6 address with the most sessions, and take corresponding measures.
<sysname> display firewall ipv6 topn source-ip session-number
2020-02-21 17:21:29.030 +08:00
 Statistic result is being generated. Please wait patiently!
<sysname>
 -------------------------------------------------------------------------------------
 Top N Session number (source IP)
 Ranking    IP address                                 Session number    VSYS
 1          2001:db8:1::1                              8                 public
 2          2001:db8:1::2                              8                 public
 3          2001:db8:1::3                              7                 public
 4          2001:db8:1::4                              7                 public
 5          2001:db8:1::5                              7                 public
 6          2001:db8:1::6                              7                 public
 7          2001:db8:1::7                              7                 public
 8          2001:db8:1::8                              7                 public
 9          2001:db8:1::9                              7                 public
 10         2001:db8:1::10                             7                 public
 -------------------------------------------------------------------------------------
# Check top N traffic source IPv6 addresses, find the source IPv6 address with the heaviest traffic, and take corresponding measures.
<sysname> display firewall ipv6 topn source-ip traffic
2020-02-21 17:22:12.330 +08:00
 Statistic result is being generated. Please wait patiently!
<sysname>
 -----------------------------------------------------------------------------------------
 Top N traffic rate (last 10 seconds)
 Ranking    IP address                                    Traffic rate(Kb/s)    VSYS
 1          2001:db8:2::1                                 4985                  public
 2          2001:db8:2::2                                 4981                  public
 3          2001:db8:2::3                                 4950                  public
 4          2001:db8:2::4                                 4944                  public
 5          2001:db8:2::5                                 4938                  public
 6          2001:db8:2::6                                 4928                  public
 7          2001:db8:2::7                                 4916                  public
 8          2001:db8:2::8                                 4916                  public
 9          2001:db8:2::9                                 4916                  public
 10         2001:db8:2::10                                4910                  public
 -----------------------------------------------------------------------------------------
Table 1 Description of the display firewall ipv6 topn command output

Item

Description

Ranking

Ranking number.

IP address

Source IP addresses by session count.

Session number

Number of sessions.

Traffic rate

Traffic rate of bytes.

VSYS

Virtual system name. public indicates the root system.

Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >