华为USG查看策略匹配 display security-policy rule source 10.248.1.1 destination 10.248.238.31 pro tcp destination-port 1521
华为USG查看策略匹配
一般是用 display firewall session table source inside xx outside xxx 这样的命令
但是只能看有真实流量触发的会话,
如果只是想看某个流量会触发哪条策略,但是并没有真实流量触发怎么?
可以使用这个
display security-policy rule source 10.248.1.1 destination 10.248.238.31 pro tcp destination-port 1521
示例:
HRP_M<USG6555F-1>display security-policy rule source 10.248.1.1 destination 10.248.238.31 pro tcp destination-port 1521
2026-09-29 09:48:24.767 +08:00
RULE ID RULE NAME STATE ACTION HITS ASSIST
----------------------------------------------------------------------------------------------
3342 2025.9.3-MaLin enable permit 0 disable
1 HA enable permit 144 disable
2346 permit_any enable deny 459977376 disable
浙公网安备 33010602011771号