Enabling Traffic Statistics And Monitoring - Huawei S9700 Series Configuration Manual

S9700 Core Routing Switch
Configuration Guide - SPU
Applicable Environment
System-level traffic statistics and monitoring take effect on all the data flows in interzones that
are enabled with the firewall feature. That is, the SPU collects statistics on packets of ICMP,
TCP, TCP proxy, and UDP sessions in the interzones. When the number of sessions exceeds the
threshold, the SPU restricts the sessions until the number of sessions is less than the threshold.
The zone-based traffic statistics and monitoring take effect on the data flows between zones.
That is, the SPU counts the total number of TCP and UDP sessions between the local zone and
other zones. When the number of sessions exceeds the threshold, the SPU restricts the sessions
until the number of sessions is less than the threshold. The zone-based traffic statistics and
monitoring can be configured in the inbound or outbound direction. The inbound direction means
that the SPU counts and monitors the sessions initiated by the local zone. The outbound direction
means that the SPU counts and monitors the sessions destined for this zone.
The IP address-based traffic statistics and monitoring count and monitor the TCP and UDP
sessions set up by an IP address in the zone. When the number of sessions set up by an IP address
exceeds the threshold, the SPU restricts the sessions until the number of sessions is less than the
threshold. The IP address-based traffic statistics and monitoring can be configured in the inbound
or outbound direction. The inbound direction means that the SPU counts and monitors the
sessions initiated by the IP address in the local zone. The outbound direction means that the
SPU counts and monitors the sessions destined for this IP address.
Pre-configuration Tasks
Before configuring traffic statistics and monitoring, complete the following tasks:
l
l
Data Preparation
To configure traffic statistics and monitoring, you need the following data.
No.
1
2
3

2.12.2 Enabling Traffic Statistics and Monitoring

You can enable traffic statistics and monitoring at the system level, zone level, or IP address
level as needed.
Procedure
l
Issue 01 (2012-03-15)
Configuring zones and adding interfaces to the zones
Configuring the interzone and enabling the firewall function in the interzone
Data
Type of sessions to be monitored, including TCP and UDP
Session threshold
Direction of traffic statistics and monitoring
Enabling system-level traffic statistics and monitoring
1. Run:
system-view
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2 Firewall Configuration
60