Specifying Persistent Sessions; Enabling Session Statistics Collection; Configuring Session Logging - HP MSR Series Configuration Manual

Step

Specifying persistent sessions

This task is only for TCP sessions in ESTABLISHED state. You can specify TCP sessions that match
the permit statements in the specified ACL as persistent sessions, and set longer lifetime or
never-age-out persistent sessions. A never-age-out session is not removed until the device receives
a connection close request from the initiator or responder, or you manually clear the session entries.
For a TCP session in ESTABLISHED state, the priority order of the associated aging time is as
follows:
•
Aging time for persistent sessions.
•
Aging time for sessions of application layer protocols.
•
Aging time for sessions in different protocol states.
To specify persistent sessions:
Step
1. Enter system view.
2. Specify persistent
sessions.

Enabling session statistics collection

This feature enables the device to collect session-based outbound and inbound packets and bytes.
To display statistics per session, use the display session table command. To display statistics per
packet type, use the display session statistics command.
To enable session statistics collection:
Step
1. Enter system view.
2. Enable session statistics
collection.

Configuring session logging

Session logs provide information about user access, IP address translation, and network traffic for
security auditing. These logs are sent to the log server or the information center.
The device supports time-based or traffic-based logging:
•
Time-based logging—The device outputs session logs at an interval.
Command
Command
system-view
session persistent acl [ ipv6 ]
acl-number [ aging-time time-value ]
Command
system-view
session statistics enable
459
Remarks
•
RTSP: 3600 seconds.
•
SCCP: 3600 seconds.
•
SIP: 300 seconds.
•
SQLNET: 600 seconds.
•
TFTP: 60 seconds.
•
XDMCP: 3600 seconds.
Remarks
N/A
By default, no persistent sessions
are specified.
Remarks
N/A
By default, session statistics
collection is disabled.