Manualshelf

HP VPN Firewall Appliances System Management and Maintenance Command Reference

ManualsBrandsHP ManualsComputer AccessoriesHP ProCurve Switch xl Access Controller Module
121122123124125126127128129130
118
Default command level
2: System level
Usage guidelines
Flow logs are saved in the cache before being exported to the information center or log server.
Clearing flow logs in the cache might cause loss of log information. Use this command with caution.
Examples
# Clear flow logs in the cache.
<Sysname> reset userlog flow logbuffer
userlog flow export host
Use the userlog flow export host command to configure the IPv4 address and UDP port number of the
log server.
Use undo userlog flow export host to remove the configuration.
Syntax
userlog flow export [ vpn-instance vpn-instance-name ] host ipv4-address udp-port
undo userlog flow export [ vpn-instance vpn-instance-name ] host ipv4-address
Default
The IPv4 address and UDP port number of the log server are not configured.
Views
System view
Default command level
2: System level
Parameters
vpn-instance vpn-instance-name: Specifies a VPN by its name, a case-sensitive string of 1 to 31
characters. If the flow logging server is on the public network, do not specify this option.
ipv4-address: Specifies the IPv4 address of a flow logging server.
udp-port: Specifies the UDP port number of the flow logging server, in the range of 0 to 65535.
Usage guidelines
To output flow logs in UDP packets to a server, you must specify the server. Otherwise flow logs cannot
be exported.
To avoid collision with general UDP port numbers, use UDP port numbers in the range 1025 to 65535.
The specified VPN instance must have been created. Otherwise packets delivery fails.
You can specify at most two log servers of the same type or different types for a device. There are three
types of log servers, the VPN flow logging server, the IPv4 flow logging server, and the IPv6 flow logging
server. If you have already specified two servers, you need to delete one to specify a new one. If you
specify a new server that has the same IP address as but has other information different from the current
server, the new configuration overwrites the previous one.