F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Access Control Command Reference-6PW100

90
icmp-closed: Specifies the aging timer for the ICMP sessions in the CLOSED state.
icmp-open: Specifies the aging timer for the ICMP sessions in the OPEN state.
rawip-open: Specifies the aging timer for the sessions in the RAWIP_OPEN state.
rawip-ready: Specifies the aging timer for the sessions in the RAWIP_READY state.
syn: Specifies the aging timer for the TCP sessions in the SYN_SENT or SYN_RCV state.
tcp-est: Specifies the aging timer for the TCP sessions in the ESTABLISHED state.
udp-open: Specifies the aging timer for the UDP sessions in the OPEN state.
udp-ready: Specifies the aging timer for the UDP sessions in the READY state.
time-value: Aging timer in seconds. The value ranges from 5 to 100000.
Usage guidelines
To display the session aging timers in different protocol states, use the display session aging-time
command.
Examples
# Set the aging time for TCP sessions in the SYN_SENT or SYN_RCV state to 60 seconds.
<Sysname> system-view
[Sysname] session aging-time syn 60
session checksum
Use session checksum to enable checksum verification for protocol packets.
Use undo session checksum to disable checksum verification.
Syntax
session checksum { all | { icmp | tcp | udp } * }
undo session checksum { all | { icmp | tcp | udp } * }
Default
Checksum verification is disabled.
Views
System view
Default command level
2: System level
Parameters
all: Enables checksum verification for TCP, UDP, and ICMP packets.
icmp: Enables checksum verification for ICMP packets.
tcp: Enables checksum verification for TCP packets.
udp: Enables checksum verification for UDP packets.
Examples
# Enable checksum verification for UDP packets.
<Sysname> system-view