Allied Telesis AR2050V, Справочник по командам, Страница: 2597 / 2824

C613-50186-01 Rev B Command Reference for AR2050V 2597
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
F
IREWALL
C
OMMANDS
CONNECTION
-
LIMIT
(F
IREWALL
)
connection-limit (Firewall)
Overview Use this command to limit firewall connections for an entity.
Use the no variant of this command to remove the limit.
Syntax
connection-limit [ <1-65535> ] from <entity_name> with limit
<0-100000>
no connection-limit {< 1-65535 >|all}
Default The limiting is disabled by default and the number of connections will not be
limited. However, the number is up to the maximum total number of allowed
connections.
Mode Firewall Configuration
Usage This command allows you to limit the number of firewall sessions associated with
a specific entity. The limit will be applied to each host on that entity. This means
connection limits applied to an entity with multiple addresses will apply the limit
to individual hosts, not the total connections for the entity. The limit applies to
both IPv4 and IPv6.
If a connection limit rule is removed, any running connections are not stopped.
Changes to limits only affect new connections. Adding a lower limit will not affect
existing connections.
Examples To set a connection limit for entity
DMZ
, use the following command:
awplus(config-firewall)# connection-limit

1 from DMZ with limit 10000
To remove the connection limit, use the following command:
awplus(config-firewall)# no connection-limit

1
Validation
commands
show firewall connections
show firewall connections limits
Parameter Description
< 1-65535 >
Unique numeric identifier for the limit.
<entity_name>
An entity represents a logical grouping of
subnets, hosts or interfaces. For more
information about entity, see the
Application
and Entity Commands .
<0-100000>
The maximum number of permitted
connections for the entity.
all
Delete all limits.