Session Log Bytes-Active - HPE FlexNetwork HSR6800 Security Command Reference

Default
The session aging time is not shortened.
Views
System view
Default command level
2: System level
Parameters
shorten-time: Specifies the time value to shorten the session aging time. The value range is 5 to
100000 seconds.
threshold-high-value: Specifies the upper threshold for the session ratio. The value range is 1 to 100
percent.
threshold-low-value: Specifies the lower threshold for the session ratio. The value range is 1 to 100
percent. The lower threshold must not exceed the upper threshold.
Usage guidelines
The session ratio is the ratio of the number of established sessions to the session count specification
of the device. After you configure early aging for sessions:
•
When the session ratio exceeds the upper threshold, the session aging time is shortened by the
time value specified by the shorten-time argument. That is, sessions are aged out earlier.
•
When the session ratio equals or drops below the lower threshold, the session aging time is
restored to the normal values configured by the application aging-time or session
aging-time command.
If the difference between the session aging time and the value specified by the shorten-time
argument is less than 5 seconds, the session aging time becomes 5 seconds.
Examples
# Configure the session aging time to shorten by 100 seconds when the session ratio exceeds 80
percent, and to restore the normal values when the session ratio equals or drops below 20 percent.
<Sysname> system-view
[Sysname] session early-ageout 100 threshold-high 80 threshold-low 20

session log bytes-active

Use session log bytes-active to set the byte count threshold for session logging.
Use undo session log bytes-active to restore the default.
Syntax
session log bytes-active bytes-value
undo session log bytes-active
Default
The system does not output session logs based on the byte count threshold.
Views
System view
Default command level
2: System level
390