3Com MSR 50 Series, Руководство по настройке

Страница: 1821 / 2443

Configuring Connection-limit 1821
Limiting connection number means that when the number of connections
initiated by a user reaches a certain upper limit, the user cannot establish new
connections either until the connection number reduces to a value not greater
than the predefined lower limit as the connection entries are gradually aged out;
or, for a device not supporting lower limit, a user must wait (for at least 5 minutes)
till the connection number is lower than the upper limit in order to create new
connections. This feature applies to VPN users as well.
c
CAUTION:
■
For parameters not configured in a connection-limit policy, the global
configurations take effect.
■
For user connections not covered in a connection-limit policy, the global
configurations take effect.
Configuration Procedure Configuring global connection-limit parameters
Follow these steps to configure global connection-limit parameters
Configuring connection-limit policy
Follow these steps to configure a connection-limit policy:
To do... Use the command... Remarks
Enter system view system-view -
Enable connection-limit
function connection-limit enable Required
Disabled by default
Configure connection-limit
action globally connection-limit default
action
[ permit | deny ]
Optional
User connections are not
counted and limited by
default.
Configure connection number
limits globally connection-limit default
amount
{ upper-limit
max-amount | lower-limit
min-amount }*
Optional
By default, the upper limit
number is 100, the lower limit
number 20.
The support for the setting of
lower-limit varies by device
models.
To do... Use the command... Remarks
Enter system view system-view -
Create or edit a
connection-limit policy and
enter the connection-limit
policy view connection-limit policy
policy-number
Required
Configure the rules of
connection-limit limit limit-id acl acl-number
[ per-destination |
per-service | per-source ] *
amount max-amount
min-amount
Required
Set connection-limit mode limit mode { all | amount |
rate }
Optional
By default, both the number
and rate of user connections
are limited.