917
For a TCP session in ESTABLISHED state, the priority of the aging time is as follows:
• Aging time for persistent sessions.
• Aging time for sessions of application layer protocols.
• Aging time for sessions in different protocol states.
A never-age-out session is not removed until the device receives a connection close request from
the initiator or responder, or you manually clear the session entries.
The configuration of persistent sessions applies only to new sessions. It has no effect on existing
sessions.
Repeat this command to use multiple ACLs to specify persistent sessions.
Examples
# Specify IPv4 ACL 2000 for identifying persistent sessions and set the aging time to 72 hours.
<Sysname> system-view
[Sysname] session persistent acl 2000 aging-time 72
# Specify IPv6 ACL 3000 for identifying persistent sessions and set the aging time to 100 hours.
<Sysname> system-view
[Sysname] session persistent acl ipv6 3000 aging-time 100
Related commands
session aging-time application
session aging-time state
session state-machine mode loose
Use session state-machine mode loose to set the mode of session state machine to loose.
Use undo session state-machine mode loose to restore the default.
Syntax
session state-machine mode loose
undo session state-machine mode loose
Default
The session state machine is in strict mode.
Views
System view
Predefined user roles
network-admin
Usage guidelines
For asymmetric-path networks, if session synchronization is disabled, to prevent the device from
dropping packets abnormally, set the mode of the session state machine to loose.
As a best practice, use the default setting on symmetric-path networks.
Examples
# Set the mode of session state machine to loose.
<Sysname> system-view
[Sysname] session state-machine mode loose
To Next Page
Loading...
Need help?
General
