HP A6600 Configuration Manual page 384

Each host on segment 192.168.0.0/24 can establish up to 100 connections to the external
•
network, and all other hosts can establish as many connections as possible.
Permit up to 10,000 connections from the external network to the DNS server.
•
Permit up to 10,000 connections from the external network to the web server.
•
Figure 128 Network diagram for connection limiting
Host A
192.168.0.11/24
Web server
192.168.0.2/24
The following describes only connection limit configuraiton steps. For more information about NAT
configuration and internal server configuration, see Layer 3
Configuration procedure
# Create a connection limit policy and enter its view.
<Router> system-view
[Router] connection-limit policy 0
# Configure connection limit rule 0 to limit connections from hosts on segment 192.168.0.0/24 to the
external network per source address, with the upper connection limit of 100.
[Router-connection-limit-policy-0] limit 0 source ip 192.168.0.0 24 destination ip any
protocol ip max-connections 100 per-source
# Configure connection limit rule 1 to limit connections from the external network to the DNS server
192.168.0.3/24, with the upper connection limit of 10,000.
[Router-connection-limit-policy-0] limit 1 source ip any destination ip 192.168.0.3 32
protocol dns max-connections 10000
# Configure connection limit rule 2 to limit connections from the external network to the web server
192.168.0.2/24, with the upper connection limit of 10,000.
[Router-connection-limit-policy-0] limit 2 source ip any destination ip 192.168.0.2 32
protocol http max-connections 10000
[Router-connection-limit-policy-0] quit
# Apply the connection limit policy.
[Router] connection-limit apply policy 0
Verification
After the configuration, use display connection-limit policy to display information about the connection
limit policy. The output is as follows:
[Router] display connection-limit policy 0
Connection-limit policy 0, refcount 1, 3 limits
limit 0 source ip 192.168.0.0 24 destination ip any protocol ip max-connections 100
per-source
Host B Host C
192.168.0.12/24 192.168.0.13/24
192.168.0.1/16
DNS server
192.168.0.3/24
GE1/0/1 GE1/0/2
202.38.1.1/16
Router
IP Services Configuration Guide.
—
372
Internet
Host