Configuring The Aging Time Of The Firewall Session Table; Establishing The Configuration Task - Huawei AR1200-S Configuration Manual

Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security
Example
Run the display port-mapping [ dns | ftp | http | rtsp | sip | port port-number ] command to
view information about port mapping.
<Huawei> display port-mapping dns
-------------------------------------------------
-------------------------------------------------
dns
-------------------------------------------------
Total number is : 1
3.9 Configuring the Aging Time of the Firewall Session
Table

3.9.1 Establishing the Configuration Task

Before configuring the aging time of the firewall session table, familiarize yourself with the
applicable environment, complete the pre-configuration tasks, and obtain the data required for
the configuration. This will help you complete the configuration task quickly and accurately.
Applicable Environment
The AR1200-S creates a session table for data flows of each protocol, such as TCP, UDP, and
ICMP, to record the connection status of the protocol. The aging time is set for the session table
of the firewall. If a record in the session table does not match any packet within the aging time,
the system deletes the record.
To change the aging time of protocol sessions, set the aging time of the firewall session table.
Data Preparation
To set the aging time of the firewall session table, you need the following data.
No.
1

3.9.2 Configuring the Aging Time of the Firewall Session Table

If a session entry is not used within the specified period, the session becomes invalid.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Issue 02 (2012-03-30)
Service Port
53
Data
Aging time of the session table of each application-layer protocol
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Acl Type
system defined
3 Firewall Configuration
65