779

If a firewall is configured on an interface and incoming and outgoing IP packets are denied by the firewall, these IP packets are counted in the firewall-denied table.

If the source or destination IP address of the IP packets passing the interface (in this case, a firewall may be configured or not) matches a network address in the rule, the packets are counted in the interior table. Otherwise, the packets are counted in the exterior table.

Note that:

You can configure up to 32 rules.

If no rule is configured, the current packets are not concerned and are all counted in the exterior table.

Example # Create an IP accounting rule.

<Sysname> system-view

[Sysname] ip count rule 169.254.10.1 255.255.0.0

ip count timeout

Syntax ip count timeout minutes

undo ip count timeout

View System view

Parameter minutes: Aging time in minutes for an accounting entry, in the range of 60 to 10,080.

Description Use the ip count timeout command to configure aging time for an IP accounting entry.

Use the undo ip count timeout command to restore the default.

By default, the aging time for an accounting entry is 720 minutes, namely, 12 hours.

If an accounting entry is not updated before its aging time expires, the entry is considered expired and then deleted.

Example # Set the aging time for an IP accounting entry to 100 minutes.

<Sysname> system-view

[Sysname] ip count timeout 100

reset ip count

Syntax reset ip count { all exterior firewall interior }

Page 779
Image 779
3Com MSR 50, MSR 30 manual Ip count timeout, Reset ip count, Syntax ip count timeout minutes Undo ip count timeout, 779