R3166-R3206-HP High-End Firewalls Access Control Command Reference-6PW101

29
Description
Use the session checksum command to enable checksum verification for protocol packets.
Use the undo session checksum command to disable checksum verification.
By default, checksum verification is disabled.
Examples
# Enable checksum verification for UDP packets.
<Sysname> system-view
[Sysname] session checksum udp
session persist acl
Syntax
session persist acl acl-number [ aging-time time-value ]
undo session persist
View
System view
Default level
2: System level
Parameters
acl-number: ACL number, in the range 2000 to 3999.
aging-time time-value: Specifies the aging time for persistent sessions, in hours. The value of the
time-value argument depends on your device model and defaults to 24. A value of 0 means the
persistent sessions are never aged.
Description
Use the session persist acl command to specify the persistent session rule. All sessions permitted by the
specified ACL are considered persistent sessions.
Use the undo session persist command to remove the configuration.
By default, no persistent session rule is specified.
Persistent sessions will not be removed because they are not matched with any packets within the aging
time. You can manually remove such sessions when necessary.
A persistent session rule can reference only one ACL.
Related commands: reset session.
Examples
# Configure all sessions matching ACL 2000 as persistent sessions, setting the aging time of the sessions
to 72 hours.
<Sysname> system-view
[Sysname] session persist acl 2000 aging-time 72