Session Checksum; Session Early-Ageout - HPE FlexNetwork HSR6800 Security Command Reference

•
TCP ESTABLISHED state: 3600 seconds.
•
UDP OPEN state: 30 seconds.
•
UDP READY state: 60 seconds.
To display the session aging timers in different protocol states, use the display session aging-time
command.
Examples
# Set the aging time for TCP sessions in the SYN_SENT or SYN_RCV state to 60 seconds.
<Sysname> system-view
[Sysname] session aging-time syn 60

session checksum

Use session checksum to enable checksum verification for protocol packets.
Use undo session checksum to disable checksum verification.
Syntax
session checksum { all | { icmp | tcp | udp } * }
undo session checksum { all | { icmp | tcp | udp } * }
Default
Checksum verification is disabled.
Views
System view
Default command level
2: System level
Parameters
all: Enables checksum verification for TCP, UDP, and ICMP packets.
icmp: Enables checksum verification for ICMP packets.
tcp: Enables checksum verification for TCP packets.
udp: Enables checksum verification for UDP packets.
Examples
# Enable checksum verification for UDP packets.
<Sysname> system-view
[Sysname] session checksum udp

session early-ageout

Use session early-ageout to set the time value to shorten the session aging time.
Use undo session early-ageout to restore the default.
Syntax
session early-ageout
threshold-low-value
undo session early-ageout
shorten-time threshold-high
389
threshold-high-value threshold-low