HPE FlexNetwork MSR Series Comware 5 Security Configuration Guide

432
[Router] connection-limit policy 0
[Router-connection-limit-policy-0] limit 0 source ip 192.168.0.0 24 destination ip any
protocol ip max-connections 10 per-source
[Router-connection-limit-policy-0] limit 1 source ip 192.168.0.100 32 destination ip any
protocol ip max-connections 100 per-source
With the configuration, the host at 192.168.0.100 can only initiate up to 10 connections to the
external network.
Analysis
Both rules limit 0 and limit 1 contain the IP address 192.168.0.100, and the rule with a smaller ID is
matched first. The rule limit 0 is used for limiting connections from 192.168.0.100.
Solution
Rearrange the two connection limit rules by exchanging their rule IDs so that the rule for the host is
matched first.

HPE FlexNetwork MSR Series Specifications

General

Category	Network Router
WAN Ports	Varies by model
LAN Ports	Varies by model
Switching Capacity	Varies by model
IPv6 Support	Yes
Product Series	MSR Series
Routing Protocols	BGP, OSPF, RIP, IS-IS, Static Routing
WAN Interfaces	Ethernet, Serial, T1/E1
LAN Interfaces	Ethernet, Fast Ethernet, Gigabit Ethernet
Power Supply	AC or DC (varies by model)
Management	CLI, Web GUI, SNMP
VPN Support	IPsec, GRE, L2TP, DMVPN
QoS Support	Yes
Ports	Varies by model
Firewall	Stateful packet inspection, DoS/DDoS protection, Application layer filtering