R0106-HP MSR Router Series Security Command Reference(V7)

481
time-value: Sets the aging time in seconds. The value range for the time-value argument is 5 to 100000.
Usage guidelines
This command sets the aging time for stable sessions of the specified application layer protocols. For TCP
sessions, the stable state is ESTABLISHED. For UDP sessions, the stable state is READY.
For sessions of application layer protocols that are not supported by this command, the aging time is set
by the session aging-time state command. For persistent sessions, the aging time is set by the session
persistent acl command.
Examples
# Set the aging time for FTP sessions to 1800 seconds.
<Sysname> system-view
[Sysname] session aging-time application ftp 1800
Related commands
• display session aging-time application
• session aging-time state
• session persistent acl
session aging-time state
Use session aging-time state to set the aging time for the sessions in a protocol state.
Use undo session aging-time state to restore the default. If no protocol state is specified, this command
restores all aging time for sessions in different protocol states to the default.
Syntax
session aging-time state { fin | icmp-reply | icmp-request | rawip-open | rawip-ready | syn | tcp-est
| udp-open | udp-ready } time-value
undo session aging-time state [ fin | icmp-reply | icmp-request | rawip-open | rawip-ready | syn |
tcp-est | udp-open | udp-ready ]
Default
The aging time for sessions in different protocol states is as follows:
• TCP SYN-SENT and SYN-RCV: 30 seconds.
• TCP ESTABLISHED: 3600 seconds.
• FIN_WAIT: 30 seconds.
• UDP-OPEN: 30 seconds.
• UDP-READY: 60 seconds.
• ICMP-REQUEST: 60 seconds.
• ICMP-REPLY: 30 seconds.
• RAWIP-OPEN: 30 seconds.
• RAWIP-READY: 60 seconds.
Views
System view
Predefined user roles
network-admin