HP VPN Firewall Appliances Access Control Command Reference

97
Table 26 Command output
Field Descri
p
tion
Connection-limit policy Number of the connection limit policy.
refcount 0, 1 limit Number of times that the policy is applied and number of rules in the policy.
limit xxx Rule in the policy. For more information, see the limit command.
Related commands
limit
limit
Use limit to configure an IP address-based connection limit policy rule. Within a connection limit policy,
the criteria of each rule must be unique.
Use undo limit to remove a connection limit policy rule.
Syntax
limit limit-id { source ip { ip-address mask-length | any } [ source-vpn src-vpn-name ] | destination ip
{ ip-address mask-length | any } [ destination-vpn dst-vpn-name ] } * protocol { dns | http | ip | tcp |
udp } max-connections max-num [ per-destination | per-source | per-source-destination ]
undo limit limit-id
Views
Connection limit policy view
Default command level
2: System level
Parameters
limit-id: Specifies the ID of a rule in the connection limit policy. The value range is 0 to 255.
source ip: Specifies the source IP address of the connections to be limited.
ip-address mask-length: IP address and its mask length. The mask-length argument is in the range of 1 to
32.
any: Specifies all IP addresses on the specified network. For example, source ip any specifies all hosts on
the source network.
source-vpn src-vpn-name: Specifies a source VPN to which the connections belong, where src-vpn-name
is a case-sensitive string of 1 to 31 characters. If the connections are in the public network, do not specify
this keyword and argument combination.
destination ip: Specifies the destination IP address of the connections to be limited.
destination-vpn dst-vpn-name: Specifies a destination VPN to which the connections belong, where
dst-vpn-name is a case-sensitive string of 1 to 31 characters. If the connections are in the public network,
do not specify this keyword and argument combination.
protocol: Specifies the protocol of the connections.
• dns: Specifies the DNS protocol.
• http: Specifies the HTTP protocol.