HP VSR1000 Security Configuration Manual page 321

Virtual services router
Table of Contents

Advertisement

# Configure connection limit rule 2 to permit up to 10000 connections to the servers that match ACL 3001.
When the number of connections exceeds 10000, new connections cannot be established until the
number drops below 9800.
[Router-connlmt-policy-1] limit 2 acl 3001 per-destination amount 10000 9800
[Router-connlmt-policy-1] quit
# Create connection limit policy 2.
[Router] connection-limit policy 2
# Configure connection limit rule 1 to permit up to 100 connections from each host that match ACL 3000.
When the number of connections exceeds 100, new connections cannot be established until the number
drops below 90.
[Router-connlmt-policy-2] limit 1 acl 3000 per-source amount 100 90
[Router-connlmt-policy-2] quit
# Apply connection limit policy 1 globally.
[Router] connection-limit apply global policy 1
# Apply connection limit policy 2 to inbound interface GigabitEthernet 1/0.
[Router] interface gigabitethernet 1/0
[Router-GigabitEthernet1/0] connection-limit apply policy 2
[Router-GigabitEthernet1/0] quit
Verifying the configuration
# Display information about the connection limit policy.
[Router] display connection-limit policy 1
IPv4 connection limit policy 1 has been applied 1 times, and has 2 limit rules.
Limit rule list:
Policy
------------------------------------------------------------
1
Application list:
Global
[Router] display connection-limit policy 2
IPv4 connection limit policy 2 has been applied 1 times, and has 1 limit rules.
Limit rule list:
Policy
------------------------------------------------------------
2
Application list:
GigabitEthernet1/0
Rule
StatType
HiThres
1
--
2
Dst
Rule
StatType
HiThres
1
Src
LoThres
ACL
100000
95000
3000
10000
9800
3001
LoThres
ACL
100
90
3000
311

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents