484
Views
Interface view
Predefined user roles
network-admin
Parameters
ipv4: Logs IPv4 sessions.
ipv6: Logs IPv6 sessions.
acl acl-number: Specifies an ACL by its number in the range of 2000 to 3999.
inbound: Specifies the inbound direction.
outbound: Specifies the outbound direction.
Usage guidelines
If no ACL is specified, this command enables session logging for all IPv4 or IPv6 sessions on the
interface.
If neither inbound nor outbound keyword is specified, you enable session logging on both directions.
Up to one IPv4 ACL and one IPv6 ACL can be applied to each direction.
If the traffic threshold and the interval are not specified but session logging is enabled, the device outputs
a session log when a session entry is created or removed.
Examples
# Enable IPv4 session logging in the inbound direction of GigabitEthernet 2/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/1/1
[Sysname-GigabitEthernet2/1/1] session log enable ipv4 inbound
# Enable session logging on GigabitEthernet 2/1/2 for IPv4 sessions that match ACL 2050 in the
outbound direction.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/1/2
[Sysname-GigabitEthernet2/1/2] session log enable ipv4 acl 2050 outbound
# Enable session logging on GigabitEthernet 2/1/3 for IPv6 sessions that match ACL 2050 in the
outbound direction.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/1/3
[Sysname-GigabitEthernet2/1/3] session log enable ipv6 acl 2050 outbound
Related commands
• session log bytes-active
• session log packets-active
• session log time-active
session log packets-active
Use session log packets-active to set the packet-based threshold for traffic-based logging.
Use undo session log packets-active to restore the default.
To Next Page
Loading...
Need help?
General
