R3303-HP HSR6800 Routers Security Configuration Guide

364
To set session logging thresholds:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Set the holdtime threshold
for session logging.
session log time-active time-value
Optional.
0 by default, which means that
the system does not output
session logs based on session
holdtime threshold.
3. Configure the traffic
threshold for session
logging.
• Set the packet count threshold:
session log packets-active
packets-value
• Set the byte count threshold:
session log bytes-active bytes-value
Optional.
0 by default, which means that
the system does not output
session logs based on packet
count threshold or byte count
threshold.
Configuring session log export
Session logs are exported in the form of flow logs.
To configure session log exporting:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Specify the flow log
version.
userlog flow export version version-number
Optional.
1.0 by default.
3. Specify the source IP
address for UDP
packets carrying flow
logs.
userlog flow export source-ip ip-address
Optional.
IP address of the interface
sending UDP packets by
default.
4. Specify the IP address
and UDP port number
of the flow log server.
• In standalone mode:
userlog flow export slot slot-number
[ vpn-instance vpn-instance-name ] host
ip-address udp-port
• In IRF mode:
userlog flow export chassis
chassis-number slot slot-number
[
vpn-instance vpn-instance-name ] host
ipv4-address udp-port
Not specified by default.
5. Specify to export flow
logs to the information
center.
userlog flow syslog
Optional.
Flow logs are exported to the
flow log server by default.