华为USG查看策略匹配 display security-policy rule source 10.248.1.1 destination 10.248.238.31 pro tcp destination-port 1521

华为USG查看策略匹配
一般是用 display firewall session table source inside xx outside xxx 这样的命令
但是只能看有真实流量触发的会话,

如果只是想看某个流量会触发哪条策略,但是并没有真实流量触发怎么?
可以使用这个
display security-policy rule source 10.248.1.1 destination 10.248.238.31 pro tcp destination-port 1521

示例:


HRP_M<USG6555F-1>display security-policy  rule source 10.248.1.1 destination 10.248.238.31 pro tcp destination-port    1521  
2026-09-29 09:48:24.767 +08:00
 
RULE ID  RULE NAME                         STATE      ACTION          HITS         ASSIST    
---------------------------------------------------------------------------------------------- 
3342     2025.9.3-MaLin                 enable     permit          0            disable    
1        HA                                enable     permit          144          disable    
2346     permit_any                        enable     deny            459977376    disable    
posted @ 2026-09-11 18:28  JacobJacob  阅读(13)  评论(0)    收藏  举报