R0106-HP MSR Router Series Security Command Reference(V7)

483
Usage guidelines
If you set both the traffic-based and time-based logging, the device outputs a session log when whichever
is reached. After outputting a session log, the device resets the traffic counter and restarts the interval for
the session.
If you set both the byte-based and packet-based thresholds, the last configuration takes effect.
Examples
# Configure the device to output session logs on a per-10-MB basis.
<Sysname> system-view
[Sysname] session log bytes-active 10
Related commands
• session log enable
• session log time-active
session log enable
Use session log enable to enable session logging.
Use undo session log enable to disable session logging.
Syntax
session log enable { ipv4 | ipv6 } [ acl acl-number ] { inbound | outbound }
undo session log enable { ipv4 | ipv6 } [ acl acl-number ] { inbound | outbound }
Default
Session logging is disabled.
Views
Interface view
Predefined user roles
network-admin
Parameters
ipv4: Logs IPv4 sessions.
ipv6: Logs IPv6 sessions.
acl acl-number: Specifies an ACL by its number in the range of 2000 to 3999.
inbound: Specifies the inbound direction.
outbound: Specifies the outbound direction.
Usage guidelines
If no ACL is specified, this command enables session logging for all IPv4 or IPv6 sessions on the
interface.
If neither inbound nor outbound keyword is specified, you enable session logging on both directions.
Up to one IPv4 ACL and one IPv6 ACL can be applied to each direction.
If the traffic threshold and the interval are not specified but session logging is enabled, the device outputs
a session log when a session entry is created or removed.