ESR series service routers.ESR-Series. User manual
Step Description Command Keys
17 Determine the lifetime of UDP session
in 'connection is confirmed' state after
which it is considered to be outdated
(optional).
esr(config)# ip firewall sessions
udp-assured-timeout <TIME>
<TIME> – lifetime of UDP
session in 'connection is
confirmed' state, takes values
in seconds [1..8553600].
Default value: 180 seconds.
18 Determine the lifetime of UDP session
in 'connection is not confirmed' state
after which it is considered to be
outdated.
esr(config)# ip firewall sessions
udp-wait-timeout <TIME>
<TIME> – lifetime of UDP
session in 'connection is not
confirmed' state, takes values
in seconds [1..8553600].
Default value: 30 seconds.
19 Create IP addresses lists which will be
used during filtration.
esr(config)# object-group network
<obj-group-name>
<obj-group-name> – up to 31
characters.
20 Specify IP addresses list description
(optional).
esr(config-object-group-network)#
description <description>
<description> – profile
description, set by the string of
up to 255 characters.
21 Add necessary IPv4/IPv6 addresses to
the list.
esr(config-object-group-network)#
ip prefix <ADDR/LEN>
<ADDR/LEN> – subnet, defined
as AAA.BBB.CCC.DDD/EE
where each part AAA-DDD
takes values of [0..255] and EE
takes values of [1..32].
esr(config-object-group-network)#
ip address-range
<FROM-ADDR>-<TO-ADDR>
<FROM-ADDR> – range starting
IP address;
<TO-ADDR> – range ending IP
address, optional parameter; If
the parameter is not specified,
a single IP address is set by the
command.
The addresses are defined as
AAA.BBB.CCC.DDD where each
part takes values of [0..255].
esr(config-object-group-network)#
ipv6 prefix <IPV6-ADDR/LEN>
<IPV6-ADDR/LEN> – IP
address and mask of a subnet,
defined as X:X:X:X::X/EE where
each X part takes values in
hexadecimal format [0..FFFF]
and EE takes values of [1..128].