R0106-HP MSR Router Series Security Command Reference(V7)

482
Parameters
fin: Specifies the TCP FIN_WAIT state.
icmp-reply: Specifies the ICMP REPLY state.
icmp-request: Specifies the IGMP REQUEST state.
rawip-open: Specifies the RAWIP-OPEN state.
rawip-ready: Specifies the RAWIP-READY state.
syn: Specifies the TCP SYN-SENT and SYN-RCV states.
tcp-est: Specifies the TCP ESTABLISHED state.
udp-open: Specifies the UDP OPEN state.
udp-ready: Specifies the UDP READY state.
time-value: Sets the aging time in seconds. The value range for the time-value argument is 5 to 100000.
Usage guidelines
This command sets the aging time for stable sessions of the application layer protocols that are not
supported by the session aging-time application command. For persistent sessions, the aging time is set
by the session persistent acl command.
Examples
# Set the aging time for TCP sessions in SYN-SENT and SYN-RCV states to 60 seconds.
<Sysname> system-view
[Sysname] session aging-time state syn 60
Related commands
• display session aging-time state
• session aging-time application
• session persistent acl
session log bytes-active
Use session log bytes-active to set the byte-based threshold for traffic-based logging.
Use undo session log bytes-active to restore the default.
Syntax
session log bytes-active bytes-value
undo session log bytes-active
Default
The device does not output session logs based on the byte-based threshold.
Views
System view
Predefined user roles
network-admin
Parameters
bytes-value: Sets the byte-based threshold in the range of 1 to 1000 MB.