R3166-R3206-HP High-End Firewalls Access Control Command Reference-6PW101

28
tcp-est: Specifies the aging time for the TCP sessions in the ESTABLISHED state.
udp-open: Specifies the aging time for the UDP sessions in the OPEN state.
udp-ready: Specifies the aging time for the UDP sessions in the READY state.
time-value: Aging time, in seconds, in the range 5 to 100000.
Description
Use the session aging-time command to set the aging time for sessions of a specified protocol that are
in a specified state.
Use the undo session aging-time command to restore the default. If no keyword is specified, the
command restores the session aging times for all protocol states to the defaults.
The defaults vary are as follows:
• accelerate: 10 seconds.
• fin: 30 seconds.
• icmp-closed: 30 seconds.
• icmp-open: 60 seconds.
• rawip-open: 30 seconds.
• rawip-ready: 60 seconds.
• syn: 30 seconds.
• tcp-est: 3600 seconds.
• udp-open: 30 seconds.
• udp-ready: 60 seconds.
Examples
# Set the aging time for TCP sessions in the SYN_SENT or SYN_RCV state to 60 seconds.
<Sysname> system-view
[Sysname] session aging-time syn 60
session checksum
Syntax
session checksum { all | { icmp | tcp | udp } * }
undo session checksum { all | { icmp | tcp | udp } * }
View
System view
Default level
2: System level
Parameters
all: Enables checksum verification for TCP, UDP, and ICMP packets.
icmp: Enables checksum verification for ICMP packets.
tcp: Enables checksum verification for TCP packets.
udp: Enables checksum verification for UDP packets.