R3303-HP HSR6800 Routers Security Command Reference

409
rawip-open: Specifies the aging timer for the sessions in the RAWIP_OPEN state.
rawip-ready: Specifies the aging timer for the sessions in the RAWIP_READY state.
syn: Specifies the aging timer for the TCP sessions in the SYN_SENT or SYN_RCV state.
tcp-est: Specifies the aging timer for the TCP sessions in the ESTABLISHED state.
udp-open: Specifies the aging timer for the UDP sessions in the OPEN state.
udp-ready: Specifies the aging timer for the UDP sessions in the READY state.
time-value: Aging time in seconds, in the range of 5 to 100000.
Usage guidelines
If no keyword is specified, the command restores the session aging times for all protocol states to the
defaults.
The defaults as follows:
• ACCELERATE state: 10 seconds.
• TCP FIN_WAIT state: 30 seconds.
• ICMP CLOSED state: 30 seconds.
• ICMP OPEN state: 60 seconds.
• RAWIP_OPEN state: 30 second.
• RAWIP_READY state: 60 seconds.
• TCP SYN_SENT and SYN_RCV state: 30 seconds.
• TCP ESTABLISHED state: 3600 seconds.
• UDP OPEN state: 30 seconds.
• UDP READY state: 60 seconds.
To display the session aging timers in different protocol states, use the display session aging-time
command.
Examples
# Set the aging time for TCP sessions in the SYN_SENT or SYN_RCV state to 60 seconds.
<Sysname> system-view
[Sysname] session aging-time syn 60
session checksum
Use session checksum to enable checksum verification for protocol packets.
Use undo session checksum to disable checksum verification.
Syntax
session checksum { all | { icmp | tcp | udp } * }
undo session checksum { all | { icmp | tcp | udp } * }
Default
Checksum verification is disabled.
Views
System view