HP MSR Series Configuration Manual page 11

Configuring APR ·········································································· 451
Overview ······························································································································ 451
PBAR ··························································································································· 451
Group-based application recognition ··················································································· 451
Command and hardware compatibility ························································································ 452
Configuring PBAR ·················································································································· 452
Configuring application groups ·································································································· 453
Enabling application statistics on an interface ·············································································· 453
Displaying and maintaining APR ······························································································· 454
APR configuration example ······································································································ 455
Network requirements ······································································································ 455
Configuration procedure ··································································································· 455
Verifying the configuration ································································································· 455
Managing sessions ······································································· 456
Overview ······························································································································ 456
Session management operation ························································································· 456
Session management functions ·························································································· 456
Command and hardware compatibility ························································································ 457
Session management task list ·································································································· 457
Setting the session aging time for different protocol states ······························································ 457
Setting the session aging time for different application layer protocols ··············································· 458
Specifying persistent sessions ·································································································· 459
Enabling session statistics collection ·························································································· 459
Configuring session logging ····································································································· 459
Displaying and maintaining session management ········································································· 460
Configuring connection limits ·························································· 463
Command and hardware compatibility ························································································ 463
Interface-based connection limit configuration task list ··································································· 463
Creating a connection limit policy ······························································································ 464
Configuring the connection limit policy ························································································ 464
Applying the connection limit policy ···························································································· 465
Displaying and maintaining connection limits ··············································································· 465
Connection limit configuration example ······················································································· 466
Network requirements ······································································································ 466
Configuration procedure ··································································································· 467
Verifying the configuration ································································································· 468
Troubleshooting connection limits ······························································································ 468
ACLs in the connection limit rules with overlapping segments ··················································· 468
Configuring object groups ······························································ 470
Overview ······························································································································ 470
Feature and hardware compatibility ··························································································· 470
Configuring an IPv4 address object group ··················································································· 470
Configuring an IPv6 address object group ··················································································· 471
Configuring a port object group ································································································· 471
Configuring a service object group ····························································································· 471
Displaying and maintaining object groups ···················································································· 472
Configuring object policies ····························································· 473
Overview ······························································································································ 473
Compatibility information ········································································································· 473
Feature and hardware compatibility ····················································································· 473
Command and hardware compatibility ················································································· 473
Object policy rules ·················································································································· 473
Rule numbering ·············································································································· 473
Rule match order ············································································································· 474
Rule description ·············································································································· 474
Object policy configuration task list ···························································································· 474
Configuration prerequisites ······································································································ 474
ix