The service-security policy command creates an MPAC policy or displays an MPAC policy view.
The undo service-security policy command deletes an MPAC policy.
By default, no MPAC policy is created.
service-security policy { ipv4 | ipv6 } security-policy-name
undo service-security policy { ipv4 | ipv6 } [ security-policy-name ]
| Parameter | Description | Value |
|---|---|---|
| ipv4 | Displays the service-sec policy view. | - |
| ipv6 | Displays the service6-sec policy view. | - |
| security-policy-name | Specifies the name of an MPAC policy. | The value is a string of 1 to 31 case-sensitive characters without spaces and must start with a letter. |
To protect the CPU against spoofed packets, run the service-security policy command to configure an MPAC policy to filter packets to be sent to the CPU.
# Display the service-sec policy view of a device.
<sysname> system-view
[sysname] service-security policy ipv4 huawei
[sysname-service-sec-huawei]
# Display the service6-sec policy view of a device.
<sysname> system-view
[sysname] service-security policy ipv6 huawei1
[sysname-service6-sec-huawei1]