R3721-F3210-F3171-HP High-End Firewalls Access Control Command Reference-6PW101

40
icmp: Enables checksum verification for ICMP packets.
tcp: Enables checksum verification for TCP packets.
udp: Enables checksum verification for UDP packets.
Description
Use session checksum to enable checksum verification for protocol packets.
Use undo session checksum to disable checksum verification.
By default, checksum verification is disabled.
Examples
# Enable checksum verification for UDP packets.
<Sysname> system-view
[Sysname] session checksum udp
session persist acl
Syntax
session persist acl acl-number [ aging-time time-value ]
undo session persist
View
System view
Default level
2: System level
Parameters
acl-number: ACL number, in the range 2000 to 3999.
aging-time time-value: Specifies the aging time for persistent sessions, in hours. The value ranges from 0
to 360 and defaults to 24. A value of 0 means the persistent sessions are never aged.
Description
Use session persist acl to specify the persistent session rule. All sessions permitted by the specified ACL
are considered persistent sessions.
Use the undo session persist command to remove the configuration.
By default, no persistent session rule is specified.
Persistent sessions will not be removed because they are not matched with any packets within the aging
time. You can manually remove such sessions when necessary.
A persistent session rule can reference only one ACL.
Related commands: reset session.
Examples
# Configure all sessions matching ACL 2000 as persistent sessions, setting the aging time of the sessions
to 72 hours.
<Sysname> system-view
[Sysname] session persist acl 2000 aging-time 72