R0106-HP MSR Router Series Security Command Reference(V7)

484
Examples
# Enable IPv4 session logging in the inbound direction of GigabitEthernet 2/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/1/1
[Sysname-GigabitEthernet2/1/1] session log enable ipv4 inbound
# Enable session logging on GigabitEthernet 2/1/2 for IPv4 sessions that match ACL 2050 in the
outbound direction.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/1/2
[Sysname-GigabitEthernet2/1/2] session log enable ipv4 acl 2050 outbound
# Enable session logging on GigabitEthernet 2/1/3 for IPv6 sessions that match ACL 2050 in the
outbound direction.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/1/3
[Sysname-GigabitEthernet2/1/3] session log enable ipv6 acl 2050 outbound
Related commands
• session log bytes-active
• session log packets-active
• session log time-active
session log packets-active
Use session log packets-active to set the packet-based threshold for traffic-based logging.
Use undo session log packets-active to restore the default.
Syntax
session log packets-active packets-value
undo session log packets-active
Default
The device does not output session logs based on the packet-based threshold.
Views
System view
Predefined user roles
network-admin
Parameters
packets-value: Sets the packet-based threshold in the range of 1 to 1000 mega-packets.
Usage guidelines
If you set both the traffic-based and time-based logging, the device outputs a session log when whichever
is reached. After outputting a session log, the device resets the traffic counter and restarts the interval for
the session.
If you set both the byte-based and packet-based thresholds, the last configuration takes effect.