Download Print this page

Session Persistent Acl - HP FlexNetwork MSR Series Command Reference Manual

Comware 7 security
Hide thumbs Also See for FlexNetwork MSR Series:

Advertisement

session persistent acl

Use session persistent acl to specify persistent sessions.
Use undo session persistent acl to restore the default.
Syntax
session persistent acl [ ipv6 ] acl-number [ aging-time time-value ]
undo session persistent acl [ ipv6 ] acl-number
Default
No persistent sessions exist.
Views
System view
Predefined user roles
network-admin
Parameters
ipv6: Specifies an IPv6 ACL. To specify an IPv4 ACL, do not specify this keyword.
acl-number: Specifies an ACL by its number in the range of 2000 to 3999.
aging-time time-value: Specifies the aging time for persistent sessions in hours. The value range for
the time-value argument is 0 to 360, and the default value is 24. To disable the aging for persistent
sessions, set the value to 0.
Usage guidelines
This command is effective only on TCP sessions in ESTABLISHED state.
For a TCP session in ESTABLISHED state, the priority of the aging time is as follows:
Aging time for persistent sessions.
Aging time for sessions of application layer protocols.
Aging time for sessions in different protocol states.
A never-age-out session is not removed until the device receives a connection close request from
the initiator or responder, or you manually clear the session entries.
The configuration of persistent sessions applies only to new sessions. It has no effect on existing
sessions.
Repeat this command to use multiple ACLs to specify persistent sessions.
Examples
# Specify IPv4 ACL 2000 for identifying persistent sessions and set the aging time to 72 hours.
<Sysname> system-view
[Sysname] session persistent acl 2000 aging-time 72
# Specify IPv6 ACL 3000 for identifying persistent sessions and set the aging time to 100 hours.
<Sysname> system-view
[Sysname] session persistent acl ipv6 3000 aging-time 100
Related commands
session aging-time application
session aging-time state
758

Advertisement

loading