Configuration Procedure - 3Com MSR 50 Series Configuration Manual

c

Configuration Procedure

Limiting connection number means that when the number of connections
initiated by a user reaches a certain upper limit, the user cannot establish new
connections either until the connection number reduces to a value not greater
than the predefined lower limit as the connection entries are gradually aged out;
or, for a device not supporting lower limit, a user must wait (for at least 5 minutes)
till the connection number is lower than the upper limit in order to create new
connections. This feature applies to VPN users as well.
CAUTION:
For parameters not configured in a connection-limit policy, the global
■
configurations take effect.
For user connections not covered in a connection-limit policy, the global
■
configurations take effect.
Configuring global connection-limit parameters
Follow these steps to configure global connection-limit parameters
To do...
Enter system view
Enable connection-limit
function
Configure connection-limit
action globally
Configure connection number
limits globally
Configuring connection-limit policy
Follow these steps to configure a connection-limit policy:
To do...
Enter system view
Create or edit a
connection-limit policy and
enter the connection-limit
policy view
Configure the rules of
connection-limit
Set connection-limit mode
Configuring Connection-limit
Use the command...
system-view
connection-limit enable
connection-limit default
action [ permit | deny ]
connection-limit default
amount { upper-limit
max-amount | lower-limit
min-amount }*
Use the command...
system-view
connection-limit policy
policy-number
limit limit-id acl acl-number
[ per-destination |
per-service | per-source ] *
amount max-amount
min-amount
limit mode { all | amount |
rate }
1821
Remarks
-
Required
Disabled by default
Optional
User connections are not
counted and limited by
default.
Optional
By default, the upper limit
number is 100, the lower limit
number 20.
The support for the setting of
lower-limit varies by device
models.
Remarks
-
Required
Required
Optional
By default, both the number
and rate of user connections
are limited.