2000
C
131: ASPF C
HAPTER
aspf-policy
Syntax
View
Parameter
Description
Example
detect
Syntax
View
Parameter
C
ONFIGURATION
OMMANDS
# Set the SYN wait timeout period of the TCP session to 20 seconds.
[Sysname-aspf-policy-1] aging-time syn 20
# Set the FIN wait timeout period of the TCP session to 10 seconds.
[Sysname-aspf-policy-1] aging-time fin 10
# Set the TCP idle timeout period to 3000 seconds.
[Sysname-aspf-policy-1] aging-time tcp 3000
# Set the UDP idle timeout period to 110 seconds.
[Sysname-aspf-policy-1] aging-time udp 110
aspf-policy aspf-policy-number
undo aspf-policy aspf-policy-number
System view
aspf-policy-number: ASPF policy number, in the range of 1 to 99
Use the
aspf-policy
Use the
undo aspf-policy
A defined ASPF policy can be applied through its policy number.
# Create an ASPF policy and enter the corresponding ASPF policy view.
<Sysname> system-view
[Sysname] aspf-policy 1
[Sysname-aspf-policy-1]
detect protocol [ java-blocking acl-number ] [ aging-time seconds ]
undo detect protocol
ASPF policy view
protocol: Name of a protocol supported by the ASPF. Application layer protocols
include FTP, HTTP, H.323, SMTP, and RTSP, and transport layer protocols include
TCP and UDP.
command to create an ASPF policy and enter its view.
command to remove an ASPF policy.