Session management commands -- display session aging-time application

Use display session aging-time application to display the aging time for sessions of different application layer protocols.

Syntax

display session aging-time application

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Examples

# Display the aging time for sessions of different application layer protocols.

<Sysname> display session aging-time application

Application Aging Time(s)

DNS 1

FTP 3600

GTP 60

H225 3600

H245 3600

RAS 300

RTSP 3600

SIP 300

TFTP 60

ILS 3600

MGCP 60

NBT 3600

PPTP 3600

RSH 60

SCCP 3600

SQLNET 600

XDMCP 3600

Table 1 Command output

Field | Description
Application | Application layer protocol.
Aging Time(s) | Aging time in seconds.

Related commands

application aging-time

Session management commands -- display session aging-time state

Use display session aging-time stat to display the aging time for sessions in different protocol states.

Syntax

display session aging-time state

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Examples

# Display the aging time for sessions in different protocol states.

<Sysname> display session aging-time state

State Aging Time(s)

SYN 10

TCP-EST 3600

FIN 10

UDP-OPEN 10

UDP-READY 30

ICMP-REQUEST 30

ICMP-REPLY 10

RAWIP-OPEN 30

RAWIP-READY 60

UDPLITE-OPEN 30

UDPLITE-READY 60

DCCP-REQUEST 30

DCCP-EST 3600

DCCP-CLOSEREQ 30

SCTP-INIT 30

SCTP-EST 3600

SCTP-SHUTDOWN 30

ICMPV6-REQUEST 60

ICMPV6-REPLY 30

Table 2 Command output

Field | Description
State | Protocol state.
Aging Time(s) | Aging time in seconds.

Related commands

session aging-time state

Session management commands -- display session relation-table

Use display session relation-table to display relation entries.

Syntax

Centralized devices:

display session relation-table { ipv4 | ipv6 }

Distributed devices in standalone mode:Centralized IRF devices:

display session relation-table { ipv4 | ipv6 } [ slot slot-number [ cpu cpu-number ] ]

Distributed devices in IRF mode:

display session relation-table { ipv4 | ipv6 } [ chassis chassis-number slot slot-number [ cpu cpu-number ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

ipv4: Specifies IPv4 relation entries.

ipv6: Specifies IPv6 relation entries.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays relation entries for all cards. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays relation entries for all member devices. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. On an IRF fabric, this command displays relation entries for all member devices if you do not specify a member device. On an IRF 3 system, this command displays relation entries for all IRF member devices and PEXs if you do not specify an IRF member device or PEX. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command displays relation entries for all cards. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. On an IRF fabric, this command displays relation entries for all cards if you do not specify a card. On an IRF 3 system, this command displays relation entries for all cards and PEXs if you do not specify a card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot. Support for this option depends on the device model.

Examples

# (Centralized devices.) Display all IPv4 relation entries.

<Sysname> display session relation-table ipv4

Source IP/port: 192.168.1.100/-

Destination IP/port: 192.168.2.100/99

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: 1/-/-

Protocol: TCP(6) TTL: 1234s App: FTP-DATA

Source IP/port: -/-

Destination IP/port: 192.168.2.200/1212

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: TCP(6) TTL: 3100s App: H225

Total entries found: 2

# (Distributed devices in standalone mode.) (Centralized IRF devices.) Display all IPv4 relation entries.

<Sysname> display session relation-table ipv4

Slot 1:

Source IP/port: 192.168.1.100/-

Destination IP/port: 192.168.2.100/99

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: 1/-/-

Protocol: TCP(6) TTL: 1234s App: FTP-DATA

Source IP/port: -/-

Destination IP/port: 192.168.2.200/1212

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: TCP(6) TTL: 3100s App: H225

Total entries found: 2

# (Centralized devices.) Display all IPv6 relation entries.

<Sysname> display session relation-table ipv6

Source IP: 2011::0002

Destination IP/port: 2011::0008/1212

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: TCP(6) TTL: 567s App: FTP-DATA

Total entries found: 1

# (Distributed devices in standalone mode.) (Centralized IRF devices.) Display all IPv6 relation entries.

<Sysname> display session relation-table ipv6

Slot 1:

Source IP: 2011::0002

Destination IP/port: 2011::0008/1212

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: TCP(6) TTL: 567s App: FTP-DATA

Total entries found: 1

# (Distributed devices in standalone mode.) (Centralized IRF devices.) Display all IPv4 relation entries.

<Sysname> display session relation-table ipv4

CPU 0 on slot 1:

Source IP/port: 192.168.1.100/-

Destination IP/port: 192.168.2.100/99

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: 1/-/-

Protocol: TCP(6) TTL: 1234s App: FTP-DATA

Source IP/port: -/-

Destination IP/port: 192.168.2.200/1212

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: TCP(6) TTL: 3100s App: H225

Total entries found: 2

# (Distributed devices in standalone mode.) (Centralized IRF devices.) Display all IPv6 relation entries.

<Sysname> display session relation-table ipv6

CPU 0 on slot 1:

Source IP: 2011::0002

Destination IP/port: 2011::0008/1212

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: TCP(6) TTL: 567s App: FTP-DATA

Total entries found: 1

Table 3 Command output

Field | Description
Source IP/port | Source IP address and port number of the session. If the IP or port number is not specified, this field displays a hyphen (-). For an IPv6 relation entry, the source port number is not displayed.
Destination IP/port | Destination IP address and port number of the session.
DS-Lite tunnel peer | Peer tunnel interface address of the DS-Lite tunnel to which the session belongs. If no peer tunnel interface address is specified, a hyphen (-) is displayed.
VPN instance/VLAN ID/VLL ID | MPLS L3VPN instance to which the relation entry belongs. VLAN and INLINE to which the relation entry belongs during Layer 2 forwarding. If a parameter is not specified, a hyphen (-) is displayed for the proper field.
Protocol | Transport layer protocol.
TTL | Remaining lifetime of the relation entry, in seconds.
App | Application layer protocol.
Total entries found | Total number of found relation entries.

Session management commands -- display session statistics

Use display session statistics to display unicast session statistics.

Syntax

Centralized devices:

display session statistics [ summary ]

Distributed devices in standalone mode:Centralized IRF devices:

display session statistics [ summary ] [ slot slot-number [ cpu cpu-number ] ]

Distributed devices in IRF mode:

display session statistics [ summary ] [ chassis chassis-number slot slot-number [ cpu cpu-number ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

summary: Displays summary information about unicast session statistics. If you do not specify this keyword, the command displays detailed information about unicast session statistics.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays unicast session statistics for all cards. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays unicast session statistics for all member devices. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. On an IRF fabric, this command displays unicast session statistics for all member devices if you do not specify a member device. On an IRF 3 system, this command displays unicast session statistics for all IRF member devices and PEXs if you do not specify an IRF member device or PEX. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command displays unicast session statistics for all cards. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. On an IRF fabric, this command displays unicast session statistics for all cards if you do not specify a card. On an IRF 3 system, this command displays unicast session statistics for all cards and PEXs if you do not specify a card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot. Support for this option depends on the device model.

Examples

# Display detailed information about unicast session statistics.

<Sysname> display session statistics

Current sessions: 3

TCP sessions: 0

UDP sessions: 0

ICMP sessions: 3

ICMPv6 sessions: 0

UDP-Lite sessions: 0

SCTP sessions: 0

DCCP sessions: 0

RAWIP sessions: 0

History average sessions per second:

Past hour: 1

Past 24 hours: 0

Past 30 days: 0

History average session establishment rate:

Past hour: 0/s

Past 24 hours: 0/s

Past 30 days: 0/s

Current relation-table entries: 0

Session establishment rate: 0/s

TCP: 0/s

UDP: 0/s

ICMP: 0/s

ICMPv6: 0/s

UDP-Lite: 0/s

SCTP: 0/s

DCCP: 0/s

RAWIP: 0/s

Received TCP : 0 packets 0 bytes

Received UDP : 118 packets 13568 bytes

Received ICMP : 105 packets 8652 bytes

Received ICMPv6 : 0 packets 0 bytes

Received UDP-Lite : 0 packets 0 bytes

Received SCTP : 0 packets 0 bytes

Received DCCP : 0 packets 0 bytes

Received RAWIP : 0 packets 0 bytes

Table 4 Command output

Field | Description
Current sessions | Total number of unicast sessions.
TCP sessions | Number of TCP unicast sessions.
UDP sessions | Number of UDP unicast sessions.
ICMP sessions | Number of ICMP unicast sessions.
ICMPv6 sessions | Number of ICMPv6 unicast sessions.
UDP-Lite sessions | Number of UDP-Lite unicast sessions.
SCTP sessions | Number of SCTP unicast sessions.
DCCP sessions | Number of DCCP unicast sessions.
RAWIP sessions | Number of Raw IP unicast sessions.
History average sessions per second | History statistics of average unicast sessions per second.
Past hour | The average number of unicast sessions per second in the most recent hour.
Past 24 hours | The average number of unicast sessions per second in the most recent 24 hours.
Past 30 days | The average number of unicast sessions per second in the most recent 30 days.
History average session establishment rate | History statistics of average unicast session establishment rates.
Past hour | The average unicast session establishment rate in the most recent hour.
Past 24 hours | The average unicast session establishment rate in the most recent 24 hours.
Past 30 days | The average unicast session establishment rate in the most recent 30 days.
Current relation-table entries | Total number of relation entries.
Session establishment rate | Unicast session establishment rate, and rates for establishing unicast sessions of different protocols.
Received TCP | Number of received TCP packets and bytes.
Received UDP | Number of received UDP packets and bytes.
Received ICMP | Number of received ICMP packets and bytes.
Received ICMPv6 | Number of received ICMPv6 packets and bytes.
Received UDP-Lite | Number of received UDP-Lite packets and bytes.
Received SCTP | Number of received SCTP packets and bytes.
Received DCCP | Number of received DCCP packets and bytes.
Received RAWIP | Number of received Raw IP packets and bytes.

# (Centralized devices.) Display summary information about unicast session statistics.

<Sysname> display session statistics summary

Sessions TCP UDP Rate TCP rate UDP rate

3 0 0 0/s 0/s 0/s

# (Distributed devices in standalone mode.) (Centralized IRF devices.) Display summary information about unicast session statistics.

<Sysname> display session statistics summary

Slot CPU Sessions TCP UDP Rate TCP rate UDP rate

1 1 3 0 0 0/s 0/s 0/s

Table 5 Command output

Field | Description
CPU | CPU number.
Sessions | Total number of unicast sessions.
TCP | Number of TCP unicast sessions.
UDP | Number of UDP unicast sessions.
Rate | Rate of unicast session creation.
TCP rate | Rate of TCP unicast session creation.
UDP rate | Rate of UDP unicast session creation.

Session management commands -- display session statistics multicast

Use display session statistic multicast to display multicast session statistics.

Syntax

Centralized devices:

display session statistics multicast

Distributed devices in standalone mode:Centralized IRF devices:

display session statistics multicast [ slot slot-number [ cpu cpu-number ] ]

Distributed devices in IRF mode:

display session statistics multicast [ chassis chassis-number slot slot-number [ cpu cpu-number ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays multicast session statistics for all cards. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays multicast session statistics for all member devices. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. On an IRF fabric, this command displays multicast session statistics for all member devices if you do not specify a member device. On an IRF 3 system, this command displays multicast session statistics for all IRF member devices and PEXs if you do not specify an IRF member device or PEX. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command displays multicast session statistics for all cards. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. On an IRF fabric, this command displays multicast session statistics for all cards if you do not specify a card. On an IRF 3 system, this command displays multicast session statistics for all cards and PEXs if you do not specify a card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot. Support for this option depends on the device model.

Examples

# (Centralized devices.) Display information about multicast session statistics.

<Sysname> display session statistics multicast

Current sessions: 0

Session establishment rate: 0/s

Received: 0 packets 0 bytes

Sent : 0 packets 0 bytes

# (Distributed devices in standalone mode.) (Centralized IRF devices.) Display information about multicast session statistics.

<Sysname> display session statistics multicast

Slot 1:

Current sessions: 0

Session establishment rate: 0/s

Received: 0 packets 0 bytes

Sent : 0 packets 0 bytes

Slot 2:

Current sessions: 0

Session establishment rate: 0/s

Received: 0 packets 0 bytes

Sent : 0 packets 0 bytes

Table 6 Command output

Field | Description
Current sessions | Total number of multicast sessions.
Session establishment rate | Rate of multicast session creation.
Received | Number of received multicast packets and bytes.
Sent | Number of sent multicast packets and bytes.

Session management commands -- display session table ipv4

Use display session table ipv4 to display information about IPv4 unicast session entries that match specific criteria.

Syntax

Centralized devices:

display session table ipv4 [ source-ip start-source-ip [ end-source-ip ] ] [ destination-ip start-destination-ip [ end-destination-ip ] ] [ protocol { dccp | icmp | raw-ip | sctp | tcp | udp | udp-lite } ] [ source-port source-port ] [ destination-port destination-port ] [ verbose ]

Distributed devices in standalone mode:Centralized IRF devices:

display session table ipv4 [ slot slot-number [ cpu cpu-number ] ] [ source-ip start-source-ip [ end-source-ip ] ] [ destination-ip start-destination-ip [ end-destination-ip ] ] [ protocol { dccp | icmp | raw-ip | sctp | tcp | udp | udp-lite } ] [ source-port source-port ] [ destination-port destination-port ] [ verbose ]

Distributed devices in IRF mode:

display session table ipv4 [ chassis chassis-number slot slot-number [ cpu cpu-number ] ] [ source-ip start-source-ip [ end-source-ip ] ] [ destination-ip start-destination-ip [ end-destination-ip ] ] [ protocol { dccp | icmp | raw-ip | sctp | tcp | udp | udp-lite } ] [ source-port source-port ] [ destination-port destination-port ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays information for all cards. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays information for all member devices. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. On an IRF fabric, this command displays information for all member devices if you do not specify a member device. On an IRF 3 system, this command displays information for all IRF member devices and PEXs if you do not specify an IRF member device or PEX. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command displays information for all cards. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. On an IRF fabric, this command displays information for all cards if you do not specify a card. On an IRF 3 system, this command displays information for all cards and PEXs if you do not specify a card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot. Support for this option depends on the device model.

source-ip start-source-ip [ end-source-ip ]: Specifies a source IPv4 address or IPv4 address range for a unicast session from the initiator to the responder. The start source-ip argument specifies the start source IPv4 address. The end source-ip argument specifies the end source IPv4 address.

destination-ip start-destination-ip [ end-destination-ip ]: Specifies a destination IPv4 address or IPv4 address range for a unicast session from the initiator to the responder. The start destination-ip argument specifies the start destination IPv4 address. The end destination-ip argument specifies the end destination IPv4 address.

protocol { dccp | icmp | raw-ip | sctp | tcp | udp | udp-lite }: Specifies an IPv4 transport layer protocol, including DCCP, ICMP, RawIP, SCTP, TCP, UDP, and UDP-Lite.

source-port source-port: Specifies a source port by its number. The source-port argument specifies the source port of a unicast session from the initiator to the responder. The value range for the source-port argument is 0 to 65535.

destination-port destination-port: Specifies a destination port by its number. The destination-port argument specifies the destination port of a unicast session from the initiator to the responder. The value range for the destination-port argument is 0 to 65535.

verbose: Displays detailed information about IPv4 unicast session entries. If you do not specify this keyword, the command displays brief information about IPv4 unicast session entries.

Usage guidelines

If you do not specify any parameters, this command displays all IPv4 unicast session entries.

Examples

# (Centralized devices.) Display brief information about all IPv4 unicast session entries.

<Sysname> display session table ipv4

Initiator:

Source IP/port: 192.168.1.18/1877

Destination IP/port: 192.168.1.55/22

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: TCP(6)

Inbound interface: GigabitEthernet1/0/1

Source security zone: Trust

Initiator:

Source IP/port: 192.168.1.18/1792

Destination IP/port: 192.168.1.55/2048

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: ICMP(1)

Inbound interface: GigabitEthernet1/0/1

Source security zone: Trust

Total sessions found: 2

# (Distributed devices in standalone mode.) (Centralized IRF devices.) Display brief information about all IPv4 unicast session entries.

<Sysname> display session table ipv4

Slot 1:

Initiator:

Source IP/port: 192.168.1.18/1877

Destination IP/port: 192.168.1.55/22

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: TCP(6)

Inbound interface: GigabitEthernet1/0/1

Source security zone: Trust

Initiator:

Source IP/port: 192.168.1.18/1792

Destination IP/port: 192.168.1.55/2048

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: ICMP(1)

Inbound interface: GigabitEthernet1/0/1

Source security zone: Trust

Total sessions found: 2

# (Centralized devices.) Display detailed information about all IPv4 unicast session entries.

<Sysname> display session table ipv4 verbose

Initiator:

Source IP/port: 192.168.1.18/1877

Destination IP/port: 192.168.1.55/22

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: TCP(6)

Inbound interface: GigabitEthernet1/0/1

Source security zone: Trust

Responder:

Source IP/port: 192.168.1.55/22

Destination IP/port: 192.168.1.18/1877

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: TCP(6)

Inbound interface: GigabitEthernet1/0/2

Source security zone: Local

State: TCP_SYN_SENT

Application: SSH

Start time: 2011-07-29 19:12:36 TTL: 28s

Initiator->Responder: 1 packets 48 bytes

Responder->Initiator: 0 packets 0 bytes

Initiator:

Source IP/port: 192.168.1.18/1792

Destination IP/port: 192.168.1.55/2048

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: ICMP(1)

Inbound interface: GigabitEthernet1/0/1

Source security zone: Trust

Responder:

Source IP/port: 192.168.1.55/1792

Destination IP/port: 192.168.1.18/0

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: ICMP(1)

Inbound interface: GigabitEthernet1/0/2

Source security zone: Local

State: ICMP_REQUEST

Application: OTHER

Start time: 2011-07-29 19:12:33 TTL: 55s

Initiator->Responder: 1 packets 60 bytes

Responder->Initiator: 0 packets 0 bytes

Total sessions found: 2

# (Distributed devices in standalone mode.) (Centralized IRF devices.) Display detailed information about all IPv4 unicast session entries.

<Sysname> display session table ipv4 verbose

Slot 1:

Initiator:

Source IP/port: 192.168.1.18/1877

Destination IP/port: 192.168.1.55/22

DS-Lite tunnel peer:-

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: TCP(6)

Inbound interface: GigabitEthernet1/0/1

Source security zone: Trust

Responder:

Source IP/port: 192.168.1.55/22

Destination IP/port: 192.168.1.18/1877

DS-Lite tunnel peer:-

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: TCP(6)

Inbound interface: GigabitEthernet1/0/2

Source security zone: Local

State: TCP_SYN_SENT

Application: SSH

Start time: 2011-07-29 19:12:36 TTL: 28s

Initiator->Responder: 1 packets 48 bytes

Responder->Initiator: 0 packets 0 bytes

Initiator:

Source IP/port: 192.168.1.18/1792

Destination IP/port: 192.168.1.55/2048

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: ICMP(1)

Inbound interface: GigabitEthernet1/0/1

Source security zone: Trust

Responder:

Source IP/port: 192.168.1.55/1792

Destination IP/port: 192.168.1.18/0

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: ICMP(1)

Inbound interface: GigabitEthernet1/0/2

Source security zone: Local

State: ICMP_REQUEST

Application: OTHER

Start time: 2011-07-29 19:12:33 TTL: 55s

Initiator->Responder: 1 packets 60 bytes

Responder->Initiator: 0 packets 0 bytes

Total sessions found: 2

# (Distributed devices in standalone mode.) (Centralized IRF devices.) Display brief information about all IPv4 unicast session entries.

<Sysname> display session table ipv4

CPU 0 on slot 1:

Initiator:

Source IP/port: 192.168.1.18/1877

Destination IP/port: 192.168.1.55/22

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: TCP(6)

Inbound interface: GigabitEthernet1/0/1

Source security zone: Trust

Initiator:

Source IP/port: 192.168.1.18/1792

Destination IP/port: 192.168.1.55/2048

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: ICMP(1)

Inbound interface: GigabitEthernet1/0/1

Source security zone: Trust

Total sessions found: 2

# (Distributed devices in standalone mode.) (Centralized IRF devices.) Display detailed information about all IPv4 unicast session entries.

<Sysname> display session table ipv4 verbose

CPU 0 on slot 1:

Initiator:

Source IP/port: 192.168.1.18/1877

Destination IP/port: 192.168.1.55/22

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: TCP(6)

Inbound interface: GigabitEthernet1/0/1

Source security zone: Trust

Responder:

Source IP/port: 192.168.1.55/22

Destination IP/port: 192.168.1.18/1877

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: TCP(6)

Inbound interface: GigabitEthernet1/0/2

Source security zone: Local

State: TCP_SYN_SENT

Application: SSH

Start time: 2011-07-29 19:12:36 TTL: 28s

Initiator->Responder: 1 packets 48 bytes

Responder->Initiator: 0 packets 0 bytes

Initiator:

Source IP/port: 192.168.1.18/1792

Destination IP/port: 192.168.1.55/2048

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: ICMP(1)

Inbound interface: GigabitEthernet1/0/1

Source security zone: Trust

Responder:

Source IP/port: 192.168.1.55/1792

Destination IP/port: 192.168.1.18/0

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: ICMP(1)

Inbound interface: GigabitEthernet1/0/2

Source security zone: Local

State: ICMP_REQUEST

Application: OTHER

Start time: 2011-07-29 19:12:33 TTL: 55s

Initiator->Responder: 1 packets 60 bytes

Responder->Initiator: 0 packets 0 bytes

Total sessions found: 2

Table 7 Command output

Field | Description
Initiator | Information about the unicast session from the initiator to the responder.
Responder | Information about the unicast session from the responder to the initiator.
DS-Lite tunnel peer | Address of the DS-Lite tunnel peer. When the unicast session does not belong to any DS-Lite tunnel, this field displays a hyphen (-).
VPN instance/VLAN ID/VLL ID | MPLS L3VPN instance to which the unicast session belongs. VLAN and INLINE to which the session belongs during Layer 2 forwarding. If a parameter is not specified, a hyphens (-) is displayed for the proper field.
Protocol | Transport layer protocol: · DCCP. · ICMP. · ICMPv6. · Raw IP. · SCTP. · TCP. · UDP. · UDP-Lite. The number in the brackets indicates the protocol number.
Source security zone | Security zone to which the inbound interface belongs. If the inbound interface does not belong to any security zone, this field displays a hyphen (-). Support for this field depends on the device model.
State | Unicast session state.
Application | Application layer protocol, FTP or DNS. If it is an unknown protocol identified by an unknown port, this field displays OTHER.
Start time | Unicast session establishment time.
TTL | Remaining lifetime of the unicast session, in seconds.
Initiator->Responder | Number of packets and bytes from the initiator to the responder.
Responder->Initiator | Number of packets and bytes from the responder to the initiator.
Total sessions found | Total number of found unicast session entries.

Session management commands -- display session table ipv6

Use display session table ipv6 to display information about IPv6 unicast session entries that match specific criteria.

Syntax

Centralized devices:

display session table ipv6 [ source-ip start-source-ip [ end-source-ip ] ] [ destination-ip start-destination-ip [ end-destination-ip ] ] [ protocol { dccp | icmp | raw-ip | sctp | tcp | udp | udp-lite } ] [ source-port source-port ] [ destination-port destination-port ] [ verbose ]

Distributed devices in standalone mode:Centralized IRF devices:

display session table ipv6 [ slot slot-number [ cpu cpu-number ] ] [ source-ip start-source-ip [ end-source-ip ] ] [ destination-ip start-destination-ip [ end-destination-ip ] ] [ protocol { dccp | icmp | raw-ip | sctp | tcp | udp | udp-lite } ] [ source-port source-port ] [ destination-port destination-port ] [ verbose ]

Distributed devices in IRF mode:

display session table ipv6 [ chassis chassis-number slot slot-number [ cpu cpu-number ] ] [ source-ip start-source-ip [ end-source-ip ] ] [ destination-ip start-destination-ip [ end-destination-ip ] ] [ protocol { dccp | icmp | raw-ip | sctp | tcp | udp | udp-lite } ] [ source-port source-port ] [ destination-port destination-port ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays information for all cards. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays information for all member devices. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. On an IRF fabric, this command displays information for all member devices if you do not specify a member device. On an IRF 3 system, this command displays information for all IRF member devices and PEXs if you do not specify an IRF member device or PEX. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on a member device. The chassis-number argument represents the member ID of the member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command displays information for all cards. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. On an IRF fabric, this command displays information for all cards if you do not specify a card. On an IRF 3 system, this command displays information for all cards and PEXs if you do not specify a card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot. Support for this option depends on the device model.

source-ip start-source-ip [ end-source-ip ]: Specifies a source IPv6 address or IPv6 address range for a unicast session from the initiator to the responder. The start source-ip argument specifies the start source IPv6 address. The end source-ip argument specifies the end source IPv6 address.

destination-ip start-destination-ip [ end-destination-ip ]: Specifies a destination IPv6 address or IPv6 address range for a unicast session from the initiator to the responder. The start destination-ip argument specifies the start destination IPv6 address. The end destination-ip argument specifies the end destination IPv6 address.

protocol { dccp | icmpv6 | raw-ip | sctp | tcp | udp | udp-lite }: Specifies an IPv6 transport layer protocol, including DCCP, ICMPv6, RawIP, SCTP, TCP, UDP, and UDP-Lite.

source-port source-port: Specifies a source port by its number. The source-port argument specifies the source port of a unicast session from the initiator to the responder. The value range for the source-port argument is 0 to 65535.

destination-port destination-port: Specifies a destination port by its number. The destination-port argument specifies the destination port of a unicast session from the initiator to the responder. The value range for the destination-port argument is 0 to 65535.

verbose: Displays detailed information about IPv6 unicast session entries. If you do not specify this keyword, the command displays brief information about IPv6 unicast session entries.

Usage guidelines

If you do not specify any parameters, this command displays all IPv6 unicast session entries.

Examples

# (Centralized devices.) Display brief information about all IPv6 unicast session entries.

<Sysname> display session table ipv6

Initiator:

Source IP/port: 2011::2/58473

Destination IP/port: 2011::8/32768

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: IPV6-ICMP(58)

Inbound interface: GigabitEthernet1/0/1

Source security zone: Trust

Total sessions found: 1

# (Distributed devices in standalone mode.) (Centralized IRF devices.) Display brief information about all IPv6 unicast session entries.

<Sysname> display session table ipv6

Slot 1:

Initiator:

Source IP/port: 2011::2/58473

Destination IP/port: 2011::8/32768

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: IPV6-ICMP(58)

Inbound interface: GigabitEthernet1/0/1

Source security zone: Trust

Total sessions found: 1

# (Centralized devices.) Display detailed information about all IPv6 unicast session entries.

<Sysname> display session table ipv6 verbose

Initiator:

Source IP/port: 2011::2/58473

Destination IP/port: 2011::8/32768

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: IPV6-ICMP(58)

Inbound interface: GigabitEthernet1/0/1

Source security zone: Trust

Responder:

Source IP/port: 2011::8/58473

Destination IP/port: 2011::2/33024

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: IPV6-ICMP(58)

Inbound interface: GigabitEthernet1/0/2

Source security zone: Local

State: ICMPV6_REQUEST

Application: OTHER

Start time: 2011-07-29 19:23:41 TTL: 55s

Initiator->Responder: 1 packets 104 bytes

Responder->Initiator: 0 packets 0 bytes

Total sessions found: 1

# (Distributed devices in standalone mode.) (Centralized IRF devices.) Display detailed information about all IPv6 unicast session entries.

<Sysname> display session table ipv6 verbose

Slot 1:

Initiator:

Source IP/port: 2011::2/58473

Destination IP/port: 2011::8/32768

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: IPV6-ICMP(58)

Inbound interface: GigabitEthernet1/0/1

Source security zone: Trust

Responder:

Source IP/port: 2011::8/58473

Destination IP/port: 2011::2/33024

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: IPV6-ICMP(58)

Inbound interface: GigabitEthernet1/0/2

Source security zone: Local

State: ICMPV6_REQUEST

Application: OTHER

Start time: 2011-07-29 19:23:41 TTL: 55s

Initiator->Responder: 1 packets 104 bytes

Responder->Initiator: 0 packets 0 bytes

Total sessions found: 1

# (Distributed devices in standalone mode.) (Centralized IRF devices.) Display brief information about all IPv6 unicast session entries.

<Sysname> display session table ipv6

CPU 0 on slot 1:

Initiator:

Source IP/port: 2011::2/58473

Destination IP/port: 2011::8/32768

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: IPV6-ICMP(58)

Inbound interface: GigabitEthernet1/0/1

Source security zone: Trust

Total sessions found: 1

# (Distributed devices in standalone mode.) (Centralized IRF devices.) Display detailed information about all IPv6 unicast session entries.

<Sysname> display session table ipv6 verbose

CPU 0 on slot 1:

Initiator:

Source IP/port: 2011::2/58473

Destination IP/port: 2011::8/32768

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: IPV6-ICMP(58)

Inbound interface: GigabitEthernet1/0/1

Source security zone: Trust

Responder:

Source IP/port: 2011::8/58473

Destination IP/port: 2011::2/33024

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: IPV6-ICMP(58)

Inbound interface: GigabitEthernet1/0/2

Source security zone: Local

State: ICMPV6_REQUEST

Application: OTHER

Start time: 2011-07-29 19:23:41 TTL: 55s

Initiator->Responder: 1 packets 104 bytes

Responder->Initiator: 0 packets 0 bytes

Total sessions found: 1

Table 8 Command output

Field | Description
Initiator | Information about the unicast session from the initiator to the responder.
Responder | Information about the unicast session from the responder to the initiator.
DS-Lite tunnel peer | Address of the DS-Lite tunnel peer. When the unicast session is not tunneled by DS-Lite, this field displays a hyphen (-).
VPN instance/VLAN ID/VLL ID | MPLS L3VPN instance to which the unicast session belongs. VLAN and INLINE to which the unicast session belongs during Layer 2 forwarding. If a parameter is not specified, a hyphens (-) is displayed for the proper field.
Protocol | Transport layer protocol: · DCCP. · ICMP. · ICMPv6. · Raw IP. · SCTP. · TCP. · UDP. · UDP-Lite. The number in the brackets indicates the protocol number.
Source security zone | Security zone to which the inbound interface belongs. If the inbound interface does not belong to any security zone, this field displays a hyphen (-). Support for this field depends on the device model.
State | Unicast session state.
Application | Application layer protocol, FTP or DNS. If it is an unknown protocol identified by an unknown port, this field displays OTHER.
Start time | Unicast session establishment time.
TTL | Remaining lifetime of the unicast session, in seconds.
Initiator->Responder | Number of packets and bytes from the initiator to the responder.
Responder->Initiator | Number of packets and bytes from the responder to the initiator.
Total sessions found | Total number of found unicast session entries.

Session management commands -- display session table multicast ipv4

Use display session table multicast ipv4 to display information about IPv4 multicast session entries that match specific criteria.

Syntax

Centralized devices:

display session table multicast ipv4 [ source-ip start-source-ip [ end-source-ip ] ] [ destination-ip start-destination-ip [ end-destination-ip ] ] [ protocol { dccp | icmp | raw-ip | sctp | tcp | udp | udp-lite } ] [ source-port source-port ] [ destination-port destination-port ] [ verbose ]

Distributed devices in standalone mode:Centralized IRF devices:

display session table multicast ipv4 [ slot slot-number [ cpu cpu-number ] ] [ source-ip start-source-ip [ end-source-ip ] ] [ destination-ip start-destination-ip [ end-destination-ip ] ] [ protocol { dccp | icmp | raw-ip | sctp | tcp | udp | udp-lite } ] [ source-port source-port ] [ destination-port destination-port ] [ verbose ]

Distributed devices in IRF mode:

display session table multicast ipv4 [ chassis chassis-number slot slot-number [ cpu cpu-number ] ] [ source-ip start-source-ip [ end-source-ip ] ] [ destination-ip start-destination-ip [ end-destination-ip ] ] [ protocol { dccp | icmp | raw-ip | sctp | tcp | udp | udp-lite } ] [ source-port source-port ] [ destination-port destination-port ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays information for all cards. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays information for all member devices. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. On an IRF fabric, this command displays information for all member devices if you do not specify a member device. On an IRF 3 system, this command displays information for all IRF member devices and PEXs if you do not specify an IRF member device or PEX. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command displays information for all cards. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. On an IRF fabric, this command displays information for all cards if you do not specify a card. On an IRF 3 system, this command displays information for all cards and PEXs if you do not specify a card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot. Support for this option depends on the device model.

source-ip start-source-ip [ end-source-ip ]: Specifies a source IPv4 address or IPv4 address range for a multicast session from the initiator to the responder. The start source-ip argument specifies the start source IPv4 address. The end source-ip argument specifies the end source IPv4 address.

destination-ip start-destination-ip [ end-destination-ip ]: Specifies a destination IPv4 address or IPv4 address range for a multicast session from the initiator to the responder. The start destination-ip argument specifies the start destination IPv4 address. The end destination-ip argument specifies the end destination IPv4 address.

protocol { dccp | icmp | raw-ip | sctp | tcp | udp | udp-lite }: Specifies an IPv4 transport layer protocol, including DCCP, ICMP, RawIP, SCTP, TCP, UDP, and UDP-Lite.

source-port source-port: Specifies a source port by its number. The source-port argument specifies the source port of a multicast session from the initiator to the responder. The value range for the source-port argument is 0 to 65535.

destination-port destination-port: Specifies a destination port by its number. The destination-port argument specifies the destination port of a multicast session from the initiator to the responder. The value range for the destination-port argument is 0 to 65535.

verbose: Displays detailed information about IPv4 multicast session entries. If you do not specify this keyword, the command displays brief information about IPv4 multicast session entries.

Usage guidelines

If you do not specify any parameters, this command displays all IPv4 multicast session entries.

Examples

# (Centralized devices.) Display brief information about all IPv4 multicast session entries.

<Sysname> display session table multicast ipv4

Inbound initiator:

Source IP/port: 3.3.3.4/1609

Destination IP/port: 232.0.0.1/1025

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Inbound interface: GigabitEthernet1/0/1

Outbound interface list:

GigabitEthernet1/0/2

GigabitEthernet1/0/3

Total sessions found: 3

# (Distributed devices in standalone mode.) (Centralized IRF devices.) Display brief information about all IPv4 multicast session entries.

<Sysname> display session table multicast ipv4

Slot 1:

Total sessions found: 0

CPU 0 on slot 2:

Total sessions found: 0

CPU 1 on slot 2:

Inbound initiator:

Source IP/port: 3.3.3.4/1609

Destination IP/port: 232.0.0.1/1025

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Inbound interface: GigabitEthernet1/0/1

Outbound interface list:

GigabitEthernet1/0/2

GigabitEthernet1/0/3

Total sessions found: 3

# (Centralized devices.) Display detailed information about all IPv4 multicast session entries.

<Sysname> display session table multicast ipv4 verbose

Inbound initiator:

Source IP/port: 3.3.3.4/1609

Destination IP/port: 232.0.0.1/1025

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Inbound responder:

Source IP/port: 232.0.0.1/1025

Destination IP/port: 3.3.3.4/1609

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Inbound interface: GigabitEthernet1/0/1

Source security zone: Trust

State: UDP_OPEN

Application: OTHER

Start time: 2014-03-03 15:59:22 TTL: 18s

Initiator->Responder: 1 packets 84 bytes

Outbound initiator:

Source IP/port: 3.3.3.4/1609

Destination IP/port: 232.0.0.1/1025

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Outbound responder:

Source IP/port: 232.0.0.1/1025

Destination IP/port: 3.3.3.4/1609

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Outbound interface: GigabitEthernet1/0/2

Destination security zone: aaa

State: UDP_OPEN

Application: OTHER

Start time: 2014-03-03 15:59:22 TTL: 18s

Initiator->Responder: 1 packets 84 bytes

Outbound initiator:

Source IP/port: 3.3.3.4/1609

Destination IP/port: 232.0.0.1/1025

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Outbound responder:

Source IP/port: 232.0.0.1/1025

Destination IP/port: 3.3.3.4/1609

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Outbound interface: GigabitEthernet1/0/3

Destination security zone: bbb

State: UDP_OPEN

Application: OTHER

Start time: 2014-03-03 15:59:22 TTL: 18s

Initiator->Responder: 1 packets 84 bytes

Total sessions found: 3

# (Distributed devices in standalone mode.) (Centralized IRF devices.) Display detailed information about all IPv4 multicast session entries.

<Sysname> display session table multicast ipv4 verbose

Slot 1:

Total sessions found: 0

CPU 0 on slot 2:

Total sessions found: 0

CPU 1 on slot 2:

Inbound initiator:

Source IP/port: 3.3.3.4/1609

Destination IP/port: 232.0.0.1/1025

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Inbound responder:

Source IP/port: 232.0.0.1/1025

Destination IP/port: 3.3.3.4/1609

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Inbound interface: GigabitEthernet1/0/1

Source security zone: Trust

State: UDP_OPEN

Application: OTHER

Start time: 2014-03-03 15:59:22 TTL: 18s

Initiator->Responder: 1 packets 84 bytes

Outbound initiator:

Source IP/port: 3.3.3.4/1609

Destination IP/port: 232.0.0.1/1025

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Outbound responder:

Source IP/port: 232.0.0.1/1025

Destination IP/port: 3.3.3.4/1609

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Outbound interface: GigabitEthernet1/0/2

Destination security zone: aaa

State: UDP_OPEN

Application: OTHER

Start time: 2014-03-03 15:59:22 TTL: 18s

Initiator->Responder: 1 packets 84 bytes

Outbound initiator:

Source IP/port: 3.3.3.4/1609

Destination IP/port: 232.0.0.1/1025

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Outbound responder:

Source IP/port: 232.0.0.1/1025

Destination IP/port: 3.3.3.4/1609

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Outbound interface: GigabitEthernet1/0/3

Destination security zone: bbb

State: UDP_OPEN

Application: OTHER

Start time: 2014-03-03 15:59:22 TTL: 18s

Initiator->Responder: 1 packets 84 bytes

Total sessions found: 3

Table 9 Command output

Field | Description
Inbound initiator | Information about the multicast session from the initiator to the responder on the inbound interface.
Inbound responder | Information about the multicast session from the responder to the initiator on the inbound interface.
Outbound initiator | Information about the multicast session from the initiator to the responder on the outbound interface.
Outbound responder | Information about the multicast session from the responder to the initiator on the outbound interface.
DS-Lite tunnel peer | Address of the DS-Lite tunnel peer. If the multicast session is not tunneled by DS-Lite, this field displays a hyphen (-).
VPN instance/VLAN ID/VLL ID | MPLS L3VPN instance to which the multicast session belongs. VLAN and INLINE to which the multicast session belongs during Layer 2 forwarding. If a parameter is not specified, a hyphens (-) is displayed for the proper field.
Protocol | Transport layer protocol: · DCCP. · ICMP. · Raw IP. · SCTP. · TCP. · UDP. · UDP-Lite. The number in the brackets indicates the protocol number.
State | Multicast session state.
Application | Application layer protocol, FTP or DNS. If it is an unknown protocol identified by an unknown port, this field displays OTHER.
Start time | Time when the multicast session was created.
TTL | Remaining lifetime of the multicast session, in seconds.
Inbound interface | Inbound interface of the first packet from the initiator to responder.
Outbound interface | Outbound interface of the first packet from the initiator to responder.
Outbound interface list | Outbound interfaces of the first packet from the initiator to responder.
Source security zone | Security zone to which the inbound interface belongs. If the inbound interface does not belong to any security zone, this field displays a hyphen (-). Support for this field depends on the device model.
Destination security zone | Security zone to which the outbound interface belongs. If the outbound interface does not belong to any security zone, this field displays a hyphen (-). Support for this field depends on the device model.
Initiator->Responder | Number of packets and bytes from the initiator to the responder.
Total sessions found | Total number of found multicast session entries.

Session management commands -- display session table multicast ipv6

Use display session table multicast ipv6 to display information about IPv6 multicast session entries that match specific criteria.

Syntax

Centralized devices:

display session table multicast ipv6 [ source-ip start-source-ip [ end-source-ip ] ] [ destination-ip start-destination-ip [ end-destination-ip ] ] [ protocol { dccp | icmpv6 | raw-ip | sctp | tcp | udp | udp-lite } ] [ source-port source-port ] [ destination-port destination-port ] [ verbose ]

Distributed devices in standalone mode:Centralized IRF devices:

display session table multicast ipv6 [ slot slot-number [ cpu cpu-number ] ] [ source-ip start-source-ip [ end-source-ip ] ] [ destination-ip start-destination-ip [ end-destination-ip ] ] [ protocol { dccp | icmpv6 | raw-ip | sctp | tcp | udp | udp-lite } ] [ source-port source-port ] [ destination-port destination-port ] [ verbose ]

Distributed devices in IRF mode:

display session table multicast ipv6 [ chassis chassis-number slot slot-number [ cpu cpu-number ] ] [ source-ip start-source-ip [ end-source-ip ] ] [ destination-ip start-destination-ip [ end-destination-ip ] [ protocol { dccp | icmpv6 | raw-ip | sctp | tcp | udp | udp-lite } ] [ source-port source-port ] [ destination-port destination-port ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays information for all cards. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays information for all member devices. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. On an IRF fabric, this command displays information for all member devices if you do not specify a member device. On an IRF 3 system, this command displays information for all IRF member devices and PEXs if you do not specify an IRF member device or PEX. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on a member device. The chassis-number argument represents the member ID of the member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command displays information for all cards. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. On an IRF fabric, this command displays information for all cards if you do not specify a card. On an IRF 3 system, this command displays information for all cards and PEXs if you do not specify a card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot. Support for this option depends on the device model.

source-ip start-source-ip [ end-source-ip ]: Specifies a source IPv6 address or IPv6 address range for a multicast session from the initiator to the responder. The start source-ip argument specifies the start source IPv6 address. The end source-ip argument specifies the end source IPv6 address.

destination-ip start-destination-ip [ end-destination-ip ]: Specifies a destination IPv6 address or IPv6 address range for a multicast session from the initiator to the responder. The start destination-ip argument specifies the start destination IPv6 address. The end destination-ip argument specifies the end destination IPv6 address.

protocol { dccp | icmpv6 | raw-ip | sctp | tcp | udp | udp-lite }: Specifies an IPv6 transport layer protocol, including DCCP, ICMPv6, RawIP, SCTP, TCP, UDP, and UDP-Lite.

source-port source-port: Specifies a source port by its number. The source-port argument specifies the source port of a multicast session from the initiator to the responder. The value range for the source-port argument is 0 to 65535.

destination-port destination-port: Specifies a destination port by its number. The destination-port argument specifies the destination port of a multicast session from the initiator to the responder. The value range for the destination-port argument is 0 to 65535.

verbose: Displays detailed information about IPv6 multicast session entries. If you do not specify this keyword, the command displays brief information about IPv6 multicast session entries.

Usage guidelines

If you do not specify any parameters, this command displays all IPv6 multicast session entries.

Examples

# (Centralized devices.) Display brief information about all IPv6 multicast session entries.

<Sysname> display session table multicast ipv6

Inbound initiator:

Source IP/port: 3::4/1617

Destination IP/port: FF0E::1/1025

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Inbound interface: GigabitEthernet1/0/1

Outbound interface list:

GigabitEthernet1/0/2

GigabitEthernet1/0/3

Total sessions found: 3

# (Distributed devices in standalone mode.) (Centralized IRF devices.) Display brief information about all IPv6 multicast session entries.

<Sysname> display session table multicast ipv6

Slot 1:

Total sessions found: 0

CPU 0 on slot 2:

Total sessions found: 0

CPU 1 on slot 2:

Inbound initiator:

Source IP/port: 3::4/1617

Destination IP/port: FF0E::1/1025

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Inbound interface: GigabitEthernet1/0/1

Outbound interface list:

GigabitEthernet1/0/2

GigabitEthernet1/0/3

Total sessions found: 3

# (Centralized devices.) Display detailed information about all IPv6 multicast session entries.

<Sysname> display session table multicast ipv6 verbose

Inbound initiator:

Source IP/port: 3::4/1617

Destination IP/port: FF0E::1/1025

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Inbound responder:

Source IP/port: FF0E::1/1025

Destination IP/port: 3::4/1617

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Inbound interface: GigabitEthernet1/0/1

Source security zone: Trust

State: UDP_OPEN

Application: OTHER

Start time: 2014-03-03 16:10:58 TTL: 23s

Initiator->Responder: 5 packets 520 bytes

Outbound initiator:

Source IP/port: 3::4/1617

Destination IP/port: FF0E::1/1025

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Outbound responder:

Source IP/port: FF0E::1/1025

Destination IP/port: 3::4/1617

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Outbound interface: GigabitEthernet1/0/2

Destination security zone: bbb

State: UDP_OPEN

Application: OTHER

Start time: 2014-03-03 16:10:58 TTL: 23s

Initiator->Responder: 5 packets 520 bytes

Outbound initiator:

Source IP/port: 3::4/1617

Destination IP/port: FF0E::1/1025

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Outbound responder:

Source IP/port: FF0E::1/1025

Destination IP/port: 3::4/1617

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Outbound interface: GigabitEthernet1/0/3

Destination security zone: ccc

State: UDP_OPEN

Application: OTHER

Start time: 2014-03-03 16:10:58 TTL: 23s

Initiator->Responder: 5 packets 520 bytes

Total sessions found: 3

# (Distributed devices in standalone mode.) (Centralized IRF devices.) Display detailed information about all IPv6 multicast session entries.

<Sysname> display session table multicast ipv6 verbose

Slot 1:

Total sessions found: 0

CPU 0 on slot 2:

Total sessions found: 0

CPU 1 on slot 2:

Inbound initiator:

Source IP/port: 3::4/1617

Destination IP/port: FF0E::1/1025

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Inbound responder:

Source IP/port: FF0E::1/1025

Destination IP/port: 3::4/1617

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Inbound interface: GigabitEthernet1/0/1

Source security zone: Trust

State: UDP_OPEN

Application: OTHER

Start time: 2014-03-03 16:10:58 TTL: 23s

Initiator->Responder: 5 packets 520 bytes

Outbound initiator:

Source IP/port: 3::4/1617

Destination IP/port: FF0E::1/1025

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Outbound responder:

Source IP/port: FF0E::1/1025

Destination IP/port: 3::4/1617

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Outbound interface: GigabitEthernet1/0/2

Destination security zone: bbb

State: UDP_OPEN

Application: OTHER

Start time: 2014-03-03 16:10:58 TTL: 23s

Initiator->Responder: 5 packets 520 bytes

Outbound initiator:

Source IP/port: 3::4/1617

Destination IP/port: FF0E::1/1025

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Outbound responder:

Source IP/port: FF0E::1/1025

Destination IP/port: 3::4/1617

DS-Lite tunnel peer: -

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Outbound interface: GigabitEthernet1/0/3

Destination security zone: ccc

State: UDP_OPEN

Application: OTHER

Start time: 2014-03-03 16:10:58 TTL: 23s

Initiator->Responder: 5 packets 520 bytes

Total sessions found: 3

Table 10 Command output

Field | Description
Inbound initiator | Information about the multicast session from the initiator to the responder on the inbound interface.
Inbound responder | Information about the multicast session from the responder to the initiator on the inbound interface.
Outbound initiator | Information about the multicast session from the initiator to the responder on the outbound interface.
Outbound responder | Information about the multicast session from the responder to the initiator on the outbound interface.
DS-Lite tunnel peer | Address of the DS-Lite tunnel peer. If the multicast session is not tunneled by DS-Lite, this field displays a hyphen (-).
VPN instance/VLAN ID/VLL ID | MPLS L3VPN instance to which the multicast session belongs. VLAN and INLINE to which the multicast session belongs during Layer 2 forwarding. If a parameter is not specified, a hyphens (-) is displayed for the proper field.
Protocol | Transport layer protocol: · DCCP. · ICMPv6. · Raw IP. · SCTP. · TCP. · UDP. · UDP-Lite. The number in the brackets indicates the protocol number.
State | Multicast session state.
Application | Application layer protocol, FTP or DNS. If it is an unknown protocol identified by an unknown port, this field displays OTHER.
Start time | Time when the multicast session was created.
TTL | Remaining lifetime of the multicast session, in seconds.
Inbound interface | Inbound interface of the first packet from the initiator to responder.
Outbound interface | Outbound interface of the first packet from the initiator to responder.
Outbound interface list | Outbound interfaces of the first packet from the initiator to responder.
Source security zone | Security zone to which the inbound interface belongs. If the inbound interface does not belong to any security zone, this field displays a hyphen (-). Support for this field depends on the device model.
Destination security zone | Security zone to which the outbound interface belongs. If the outbound interface does not belong to any security zone, this field displays a hyphen (-). Support for this field depends on the device model.
Initiator->Responder | Number of packets and bytes from the initiator to the responder.
Total sessions found | Total number of found multicast session entries.

Session management commands -- display session top-statistics

| NOTE: Support for this command depends on the device model.

Use display session top-statistics to display top session statistics.

Syntax

display session top-statistics { last-1-hour | last-24-hours | last-30-days }

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

last-1-hour: Displays top session statistics in last hour.

last-24-hours: Displays top session statistics in last 24 hours.

last-30-days: Displays top session statistics in last 30 days.

Usage guidelines

This command displays nothing if the top session statistics feature is not enabled. A maximum of ten session items can be displayed.

Examples

# Display top session statistics in last hour.

<Sysname> display session top-statistics last-1-hour

Counting by source addresses:

No. Source address Sessions

1 10.1.2.3 50004302

2 10.1.2.2 40123255

3 10.2.2.10 26664302

4 10.1.2.11 7123255

5 10.1.2.12 424302

6 10.1.2.13 253255

7 10.1.2.14 55302

8 10.1.2.15 50025

9 10.1.2.16 3555

10 10.1.2.1 995

Counting by destination addresses:

No. Destination address Sessions

1 20.1.2.3 50004302

2 20.1.2.2 40123255

3 20.2.2.10 26664302

4 20.1.2.11 7123255

5 20.1.2.12 424302

6 20.1.2.13 325325

7 20.1.2.14 55530

8 20.1.2.15 50025

9 20.1.2.16 3555

10 20.1.2.1 995

Table 11 Command output

Field | Description
Counting by source addresses | Top session statistics based on source addresses.
Counting by destination addresses | Top session statistics based on destination addresses.
No. | Ranking number.
Source address | Source IP address of the sessions.
Destination address | Destination IP address of the sessions.
Sessions | Total number of sessions.

Related commands

session top-statistics enable

Session management commands -- reset session relation-table

Use reset session relation-table to clear relation entries.

Syntax

Centralized devices:

reset session relation-table [ ipv4 | ipv6 ]

Distributed devices in standalone mode:Centralized IRF devices:

reset session relation-table [ ipv4 | ipv6 ] [ slot slot-number [ cpu cpu-number ] ]

Distributed devices in IRF mode:

reset session relation-table [ ipv4 | ipv6 ] [ chassis chassis-number slot slot-number [ cpu cpu-number ] ]

Views

User view

Predefined user roles

network-admin

mdc-admin

Parameters

ipv4: Specifies IPv4 relation entries.

ipv6: Specifies IPv6 relation entries.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command clears relation entries for all cards. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command clears relation entries for all member devices. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. On an IRF fabric, this command clears relation entries for all member devices if you do not specify a member device. On an IRF 3 system, this command clears relation entries for all IRF member devices and PEXs if you do not specify an IRF member device or PEX. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on a member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command clears relation entries for all cards. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. On an IRF fabric, this command clears relation entries for all cards if you do not specify a card. On an IRF 3 system, this command clears relation entries for all cards and PEXs if you do not specify a card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot. Support for this option depends on the device model.

Usage guidelines

If you do not specify the IPv4 keyword or the IPv6 keyword, this command clears all IPv4 and IPv6 relation entries.

Examples

# Clear all IPv4 relation entries.

<Sysname> reset session relation-table ipv4

Related commands

display session relation-table

Session management commands -- reset session statistics

Use reset session statistics to clear unicast session statistics.

Syntax

Centralized devices:

reset session statistics

Distributed devices in standalone mode:Centralized IRF devices:

reset session statistics [ slot slot-number [ cpu cpu-number ] ]

Distributed devices in IRF mode:

reset session statistics [ chassis chassis-number slot slot-number [ cpu cpu-number ] ]

Views

User view

Predefined user roles

network-admin

mdc-admin

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command clears unicast session statistics for all cards. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command clears unicast session statistics for all member devices. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. On an IRF fabric, this command clears unicast session statistics for all member devices if you do not specify a member device. On an IRF 3 system, this command clears unicast session statistics for all IRF member devices and PEXs if you do not specify an IRF member device or PEX. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on a member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command clears unicast session statistics for all cards. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. On an IRF fabric, this command clears unicast session statistics for all cards if you do not specify a card. On an IRF 3 system, this command clears unicast session statistics for all cards and PEXs if you do not specify a card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot. Support for this option depends on the device model.

Examples

# Clear all unicast session statistics.

<Sysname> reset session statistics

Related commands

display session statistics

Session management commands -- reset session statistics multicast

Use reset session statistics multicast to clear multicast session statistics.

Syntax

Centralized devices:

reset session statistics multicast

Distributed devices in standalone mode:Centralized IRF devices:

reset session statistics multicast [ slot slot-number [ cpu cpu-number ] ]

Distributed devices in IRF mode:

reset session statistics multicast [ chassis chassis-number slot slot-number [ cpu cpu-number ] ]

Views

User view

Predefined user roles

network-admin

mdc-admin

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command clears multicast session statistics for all cards. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command clears multicast session statistics for all member devices. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. On an IRF fabric, this command clears multicast session statistics for all member devices if you do not specify a member device. On an IRF 3 system, this command clears multicast session statistics for all IRF member devices and PEXs if you do not specify an IRF member device or PEX. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on a member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command clears multicast session statistics for all cards. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. On an IRF fabric, this command clears multicast session statistics for all cards if you do not specify a card. On an IRF 3 system, this command clears multicast session statistics for all cards and PEXs if you do not specify a card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot. Support for this option depends on the device model.

Examples

# Clear all multicast session statistics.

<Sysname> reset session statistics multicast

Related commands

display session statistics multicast

Session management commands -- reset session table

Use reset session table to clear IPv4 and IPv6 unicast session entries.

Syntax

Centralized devices:

reset session table

Distributed devices in standalone mode:Centralized IRF devices:

reset session table [ slot slot-number [ cpu cpu-number ] ]

Distributed devices in IRF mode:

reset session table [ chassis chassis-number slot slot-number [ cpu cpu-number ] ]

Views

User view

Predefined user roles

network-admin

mdc-admin

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command clears unicast session entries for all cards. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command clears unicast session entries for all member devices. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. On an IRF fabric, this command clears unicast session entries for all member devices if you do not specify a member device. On an IRF 3 system, this command clears unicast session entries for all IRF member devices and PEXs if you do not specify an IRF member device or PEX. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on a member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command clears unicast session entries for all cards. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. On an IRF fabric, this command clears unicast session entries for all cards if you do not specify a card. On an IRF 3 system, this command clears unicast session entries for all cards and PEXs if you do not specify a card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot. Support for this option depends on the device model.

Examples

# Clear all IPv4 and IPv6 unicast session entries.

<Sysname> reset session table

Related commands

display session table ipv4

display session table ipv6

Session management commands -- reset session table ipv4

Use reset session table ipv4 to clear information about IPv4 unicast session entries that match specific criteria.

Syntax

Centralized devices:

reset session table ipv4 [ source-ip source-ip ] [ destination-ip destination-ip ] [ protocol { dccp | icmp | raw-ip | sctp | tcp | udp | udp-lite } ] [ source-port source-port ] [ destination-port destination-port ] [ vpn-instance vpn-instance-name ]

Distributed devices in standalone mode:Centralized IRF devices:

reset session table ipv4 [ slot slot-number [ cpu cpu-number ] ] [ source-ip source-ip ] [ destination-ip destination-ip ] [ protocol { dccp | icmp | raw-ip | sctp | tcp | udp | udp-lite } ] [ source-port source-port ] [ destination-port destination-port ] [ vpn-instance vpn-instance-name ]

Distributed devices in IRF mode:

reset session table ipv4 [ chassis chassis-number slot slot-number [ cpu cpu-number ] ] [ source-ip source-ip ] [ destination-ip destination-ip ] [ protocol { dccp | icmp | icmpv6 | raw-ip | sctp | tcp | udp | udp-lite } ] [ source-port source-port ] [ destination-port destination-port ] [ vpn-instance vpn-instance-name ]

Views

User view

Predefined user roles

network-admin

mdc-admin

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command clears information for all cards. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command clears information for all member devices. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. On an IRF fabric, this command clears information for all member devices if you do not specify a member device. On an IRF 3 system, this command clears information for all IRF member devices and PEXs if you do not specify an IRF member device or PEX. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on a member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command clears information for all cards. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. On an IRF fabric, this command clears information for all cards if you do not specify a card. On an IRF 3 system, this command clears information for all cards and PEXs if you do not specify a card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot. Support for this option depends on the device model.

source-ip source-ip: Specifies a source IPv4 address. The source-ip argument specifies the source IPv4 address of a unicast session from the initiator to the responder.

destination-ip destination-ip: Specifies a destination IPv4 address. The destination-ip argument specifies the destination IPv4 address of a unicast session from the initiator to the responder.

protocol { dccp | icmp | raw-ip | sctp | tcp | udp | udp-lite }: Specifies an IPv4 transport layer protocol, including DCCP, ICMP, RawIP, SCTP, TCP, UDP, and UDP-Lite.

source-port source-port: Specifies a source port by its number. The source-port argument specifies the source port of a unicast session from the initiator to the responder. The value range for the source-port argument is 0 to 65535.

destination-port destination-port: Specifies a destination port by its number. The destination-port argument specifies the destination port of a unicast session from the initiator to the responder. The value range for the destination-port argument is 0 to 65535.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you want to clear IPv4 unicast session entries on the public network, do not specify this option.

Usage guidelines

If you do not specify any parameters, this command clears all IPv4 unicast session entries on the public network.

Examples

# Clear all IPv4 unicast session entries.

<Sysname> reset session table ipv4

# Clear the IPv4 unicast session entries with the source IP address of 10.10.10.10.

<Sysname> reset session table ipv4 source-ip 10.10.10.10

Related commands

display session table ipv4

Session management commands -- reset session table ipv6

Use reset session table ipv6 to clear information about IPv6 unicast session entries that match the specified criteria.

Syntax

Centralized devices:

reset session table ipv6 [ source-ip source-ip ] [ destination-ip destination-ip ] [ protocol { dccp | icmpv6 | raw-ip | sctp | tcp | udp | udp-lite } ] [ source-port source-port ] [ destination-port destination-port ] [ vpn-instance vpn-instance-name ]

Distributed devices in standalone mode:Centralized IRF devices:

reset session table ipv6 [ slot slot-number [ cpu cpu-number ] ] [ source-ip source-ip ] [ destination-ip destination-ip ] [ protocol { dccp | icmpv6 | raw-ip | sctp | tcp | udp | udp-lite } ] [ source-port source-port ] [ destination-port destination-port ] [ vpn-instance vpn-instance-name ]

Distributed devices in IRF mode:

reset session table ipv6 [ chassis chassis-number slot slot-number [ cpu cpu-number ] ] [ source-ip source-ip ] [ destination-ip destination-ip ] [ protocol { dccp | icmpv6 | raw-ip | sctp | tcp | udp | udp-lite } ] [ source-port source-port ] [ destination-port destination-port ] [ vpn-instance vpn-instance-name ]

Views

User view

Predefined user roles

network-admin

mdc-admin

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command clears information for all cards. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command clears information for all member devices. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. On an IRF fabric, this command clears information for all member devices if you do not specify a member device. On an IRF 3 system, this command clears information for all IRF member devices and PEXs if you do not specify an IRF member device or PEX. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on a member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command clears information for all cards. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. On an IRF fabric, this command clears information for all cards if you do not specify a card. On an IRF 3 system, this command clears information for all cards and PEXs if you do not specify a card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot. Support for this option depends on the device model.

source-ip source-ip: Specifies a source IPv6 address. The source-ip argument specifies the source IPv6 address of a unicast session from the initiator to the responder.

destination-ip destination-ip: Specifies a destination IPv6 address. The destination-ip argument specifies the destination IPv6 address of a unicast session from the initiator to the responder.

protocol { dccp | icmpv6 | raw-ip | sctp | tcp | udp | udp-lite }: Specifies an IPv6 transport layer protocol, including DCCP, ICMPv6, Raw IP, SCTP, TCP, UDP, and UDP-Lite.

source-port source-port: Specifies a source port by its number. The source-port argument specifies the source port of a unicast session from the initiator to the responder. The value range for the source-port argument is 0 to 65535.

destination-port destination-port: Specifies a destination port by its number. The destination-port argument specifies the destination port of a unicast session from the initiator to the responder. The value range for the destination-port argument is 0 to 65535.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you want to clear IPv6 unicast session entries on the public network, do not specify this option.

Usage guidelines

If you do not specify any parameters, this command clears all IPv6 unicast session entries on the public network.

Examples

# Clear all IPv6 unicast session entries.

<Sysname> reset session table ipv6

# Clear the IPv6 unicast session entries with the source IP address of 2011::0002.

<Sysname> reset session table ipv6 source-ip 2011::0002

Related commands

display session table ipv6

Session management commands -- reset session table multicast

Use reset session table multicast to clear IPv4 and IPv6 multicast session entries.

Syntax

Centralized devices:

reset session table multicast

Distributed devices in standalone mode:Centralized IRF devices:

reset session table multicast [ slot slot-number [ cpu cpu-number ] ]

Distributed devices in IRF mode:

reset session table multicast [ chassis chassis-number slot slot-number [ cpu cpu-number ] ]

Views

User view

Predefined user roles

network-admin

mdc-admin

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command clears multicast session entries for all cards. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command clears multicast session entries for all member devices. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. On an IRF fabric, this command clears multicast session entries for all member devices if you do not specify a member device. On an IRF 3 system, this command clears multicast session entries for all IRF member devices and PEXs if you do not specify an IRF member device or PEX. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on a member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command clears multicast session entries for all cards. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. On an IRF fabric, this command clears multicast session entries for all cards if you do not specify a card. On an IRF 3 system, this command clears multicast session entries for all cards and PEXs if you do not specify a card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot. Support for this option depends on the device model.

Examples

# Clear all IPv4 and IPv6 multicast session entries.

<Sysname> reset session table multicast

Related commands

display session table multicast ipv4

display session table multicast ipv6

Session management commands -- reset session table multicast ipv4

Use reset session table multicast ipv4 to clear information about IPv4 multicast session entries that match specific criteria.

Syntax

Centralized devices:

reset session table multicast ipv4 [ source-ip source-ip ] [ destination-ip destination-ip ] [ protocol { dccp | icmp | raw-ip | sctp | tcp | udp | udp-lite } ] [ source-port source-port ] [ destination-port destination-port ] [ vpn-instance vpn-instance-name ]

Distributed devices in standalone mode:Centralized IRF devices:

reset session table multicast ipv4 [ slot slot-number [ cpu cpu-number ] ] [ source-ip source-ip ] [ destination-ip destination-ip ] [ protocol { dccp | icmp | raw-ip | sctp | tcp | udp | udp-lite } ] [ source-port source-port ] [ destination-port destination-port ] [ vpn-instance vpn-instance-name ]

Distributed devices in IRF mode:

reset session table multicast ipv4 [ chassis chassis-number slot slot-number [ cpu cpu-number ] ] [ source-ip source-ip ] [ destination-ip destination-ip ] [ protocol { dccp | icmp | raw-ip | sctp | tcp | udp | udp-lite } ] [ source-port source-port ] [ destination-port destination-port ] [ vpn-instance vpn-instance-name ]

Views

User view

Predefined user roles

network-admin

mdc-admin

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command clears information for all cards. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command clears information for all member devices. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. On an IRF fabric, this command clears information for all member devices if you do not specify a member device. On an IRF 3 system, this command clears information for all IRF member devices and PEXs if you do not specify an IRF member device or PEX. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on a member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command clears information for all cards. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. On an IRF fabric, this command clears information for all cards if you do not specify a card. On an IRF 3 system, this command clears information for all cards and PEXs if you do not specify a card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot. Support for this option depends on the device model.

source-ip source-ip: Specifies a source IPv4 address. The source-ip argument specifies the source IPv4 address of a multicast session from the initiator to the responder.

destination-ip destination-ip: Specifies a destination IPv4 address. The destination-ip argument specifies the destination IPv4 address of a multicast session from the initiator to the responder.

protocol { dccp | icmp | raw-ip | sctp | tcp | udp | udp-lite }: Specifies an IPv4 transport layer protocol, including DCCP, ICMP, RawIP, SCTP, TCP, UDP, and UDP-Lite.

source-port source-port: Specifies a source port by its number. The source-port argument specifies the source port of a multicast session from the initiator to the responder. The value range for the source-port argument is 0 to 65535.

destination-port destination-port: Specifies a destination port by its number. The destination-port argument specifies the destination port of a multicast session from the initiator to the responder. The value range for the destination-port argument is 0 to 65535.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you want to clear IPv4 multicast session entries on the public network, do not specify this option.

Usage guidelines

If you do not specify any parameters, this command clears all IPv4 multicast session entries on the public network.

Examples

# Clear all IPv4 multicast session entries.

<Sysname> reset session table multicast ipv4

# Clear the IPv4 multicast session entries with the source IP address of 10.10.10.10.

<Sysname> reset session table multicast ipv4 source-ip 10.10.10.10

Related commands

display session table multicast ipv4

Session management commands -- reset session table multicast ipv6

Use reset session table multicast ipv6 to clear information about IPv6 multicast session entries that match specific criteria.

Syntax

Centralized devices:

reset session table multicast ipv6 [ source-ip source-ip ] [ destination-ip destination-ip ] [ protocol { dccp | icmpv6 | raw-ip | sctp | tcp | udp | udp-lite } ] [ source-port source-port ] [ destination-port destination-port ] [ vpn-instance vpn-instance-name ]

Distributed devices in standalone mode:Centralized IRF devices:

reset session table multicast ipv6 [ slot slot-number [ cpu cpu-number ] ] [ source-ip source-ip ] [ destination-ip destination-ip ] [ protocol { dccp | icmpv6 | raw-ip | sctp | tcp | udp | udp-lite } ] [ source-port source-port ] [ destination-port destination-port ] [ vpn-instance vpn-instance-name ]

Distributed devices in IRF mode:

reset session table multicast ipv6 [ chassis chassis-number slot slot-number [ cpu cpu-number ] ] [ source-ip source-ip ] [ destination-ip destination-ip ] [ protocol { dccp | icmpv6 | raw-ip | sctp | tcp | udp | udp-lite } ] [ source-port source-port ] [ destination-port destination-port ] [ vpn-instance vpn-instance-name ]

Views

User view

Predefined user roles

network-admin

mdc-admin

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command clears information for all cards. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command clears information for all member devices. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. On an IRF fabric, this command clears information for all member devices if you do not specify a member device. On an IRF 3 system, this command clears information for all IRF member devices and PEXs if you do not specify an IRF member device or PEX. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on a member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command clears information for all cards. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. On an IRF fabric, this command clears information for all cards if you do not specify a card. On an IRF 3 system, this command clears information for all cards and PEXs if you do not specify a card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot. Support for this option depends on the device model.

source-ip source-ip: Specifies a source IPv6 address. The source-ip argument specifies the source IPv6 address of a multicast session from the initiator to the responder.

destination-ip destination-ip: Specifies a destination IPv6 address. The destination-ip argument specifies the destination IPv6 address of a multicast session from the initiator to the responder.

protocol { dccp | icmpv6 | raw-ip | sctp | tcp | udp | udp-lite }: Specifies an IPv6 transport layer protocol, including DCCP, ICMPv6, RawIP, SCTP, TCP, UDP, and UDP-Lite.

source-port source-port: Specifies a source port by its number. The source-port argument specifies the source port of a multicast session from the initiator to the responder. The value range for the source-port argument is 0 to 65535.

destination-port destination-port: Specifies a destination port by its number. The destination-port argument specifies the destination port of a multicast session from the initiator to the responder. The value range for the destination-port argument is 0 to 65535.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you want to clear IPv6 multicast session entries on the public network, do not specify this option.

Usage guidelines

If you do not specify any parameters, this command clears all IPv6 multicast session entries on the public network.

Examples

# Clear all IPv6 multicast session entries.

<Sysname> reset session table multicast ipv6

# Clear the IPv6 multicast session entries with the source IP address of 2011::0002.

<Sysname> reset session table multicast ipv6 source-ip 2011::0002

Related commands

display session table multicast ipv6

Session management commands -- session aging-time application

Use session aging-time application to set the aging time for sessions of an application layer protocol.

Use undo session aging-time application to restore the default. If you do not specify an application layer protocol, this command restores the default aging time for all sessions of the supported application layer protocols.

Syntax

session aging-time application { dns | ftp | gtp | h225 | h245 | ils | mgcp | nbt | pptp | ras | rsh | rtsp | sccp | sip | sqlnet | tftp | xdmcp } time-value

undo session aging-time application [ dns | ftp | gtp | h225 | h245 | ras | rtsp | sip | tftp ]

Default

The aging time for sessions of application layer protocols is as follows:

· DNS sessions: 1 second.

· FTP sessions: 3600 seconds.

· GTP sessions: 60 seconds.

· H.225 sessions: 3600 seconds.

· H.245 sessions: 3600 seconds.

· ILS sessions: 3600 seconds.

· MGCP sessions: 60 seconds.

· NBT sessions: 3600 second.

· PPTP sessions: 3600 seconds.

· RAS sessions: 300 seconds.

· RSH sessions: 60 seconds.

· RTSP sessions: 3600 seconds.

· SCCP sessions: 3600 seconds.

· SIP sessions: 300 seconds.

· SQLNET sessions: 600 seconds.

· TFTP sessions: 60 seconds.

· XDMCP sessions: 3600 seconds.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

dns: Specifies the DNS protocol.

ftp: Specifies the FTP protocol.

gtp: Specifies the GPRS Tunneling Protocol (GTP) protocol.

h225: Specifies the H.225 protocol.

h245: Specifies the H.245 protocol.

ils: Specifies the Internet Locator Service (ILS) protocol.

mgcp: Specifies the Media Gateway Control Protocol (MGCP) protocol.

nbt: Specifies the NetBIOS over TCP/IP (NBT) protocol.

pptp: Specifies the Point-to-Point Tunneling Protocol (PPTP) protocol.

ras: Specifies the RAS protocol.

rsh: Specifies the Remote Shell (RSH) protocol.

rtsp: Specifies the Real Time Streaming Protocol (RTSP) protocol.

sccp: Specifies the Skinny Client Control Protocol (SCCP) protocol.

sip: Specifies the Session Initiation Protocol (SIP) protocol.

sqlnet: Specifies the SQLNET protocol.

tftp: Specifies the TFTP protocol.

xdmcp: Specifies the X Display Manager Control Protocol (XDMCP) protocol.

time-value: Specifies the aging time in seconds. The value range is 5 to 100000. If you specify the dns keyword, the value range is 1 to 100000.

Usage guidelines

This command sets the aging time for stable sessions of the specified application layer protocols. For TCP sessions, the stable state is ESTABLISHED. For UDP sessions, the stable state is READY.

For sessions of application layer protocols that are not supported by this command, the aging time is set by the session aging-time state command. For persistent sessions, the aging time is set by the session persistent acl command.

Examples

# Set the aging time for FTP sessions to 1800 seconds.

<Sysname> system-view

[Sysname] session aging-time application ftp 1800

Related commands

display session aging-time application

session aging-time state

session persistent acl

Session management commands -- session aging-time state

Use session aging-time state to set the aging time for the sessions in a protocol state.

Use undo session aging-time state to restore the default for the sessions in a protocol state. If you do not specify a protocol state, this command restores all aging time for sessions in different protocol states to the default.

Syntax

session aging-time state { fin | icmp-reply | icmp-request | rawip-open | rawip-ready | syn | tcp-est | udp-open | udp-ready } time-value

undo session aging-time state [ fin | icmp-reply | icmp-request | rawip-open | rawip-ready | syn | tcp-est | udp-open | udp-ready ]

Default

The aging time for sessions in different protocol states is as follows:

· FIN_WAIT: 30 seconds.

· ICMP-REPLY: 30 seconds.

· ICMP-REQUEST: 60 seconds.

· RAWIP-OPEN: 30 seconds.

· RAWIP-READY: 60 seconds.

· TCP SYN-SENT and SYN-RCV: 30 seconds.

· TCP ESTABLISHED: 3600 seconds.

· UDP-OPEN: 30 seconds.

· UDP-READY: 60 seconds.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

fin: Specifies the TCP FIN_WAIT state.

icmp-reply: Specifies the ICMP REPLY state.

icmp-request: Specifies the IGMP REQUEST state.

rawip-open: Specifies the RAWIP-OPEN state.

rawip-ready: Specifies the RAWIP-READY state.

syn: Specifies the TCP SYN-SENT and SYN-RCV states.

tcp-est: Specifies the TCP ESTABLISHED state.

udp-open: Specifies the UDP OPEN state.

udp-ready: Specifies the UDP READY state.

time-value: Specifies the aging time in seconds. The value range is 5 to 100000.

Usage guidelines

This command sets the aging time for stable sessions of the application layer protocols that are not supported by the session aging-time application command. For persistent sessions, the aging time is set by the session persistent acl command.

Examples

# Set the aging time for TCP sessions in SYN-SENT and SYN-RCV states to 60 seconds.

<Sysname> system-view

[Sysname] session aging-time state syn 60

Related commands

display session aging-time state

session aging-time application

session persistent acl

Session management commands -- session log bytes-active

| NOTE: Support for this command depends on the device model.

Use session log bytes-active to set the byte-based threshold for traffic-based logging.

Use undo session log bytes-active to restore the default.

Syntax

session log bytes-active bytes-value

undo session log bytes-active

Default

The device does not output session logs based on the byte-based threshold.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

bytes-value: Specifies the byte-based threshold in the range of 1 to 1000 MB.

Usage guidelines

If you set both the traffic-based and time-based logging, the device outputs a session log when whichever is reached. After outputting a session log, the device resets the traffic counter and restarts the interval for the session.

Only one traffic-based threshold can take effect. If you set both the byte-based and packet-based thresholds, the most recent configuration takes effect.

Examples

# Configure the device to output session logs on a per-10-MB basis.

<Sysname> system-view

[Sysname] session log bytes-active 10

Related commands

session log enable

session log time-active

Session management commands -- session log enable

| NOTE: Support for this command depends on the device model.

Use session log enable to enable session logging.

Use undo session log enable to disable session logging.

Syntax

session log enable { ipv4 | ipv6 } [ acl acl-number ] { inbound | outbound }

undo session log enable { ipv4 | ipv6 } [ acl acl-number ] { inbound | outbound }

Default

Session logging is disabled.

Views

Interface view

Predefined user roles

network-admin

mdc-admin

Parameters

ipv4: Logs IPv4 sessions.

ipv6: Logs IPv6 sessions.

acl acl-number: Specifies an ACL by its number in the range of 2000 to 3999. If you do not specify an ACL, this command enables session logging for all IPv4 or IPv6 sessions on the interface.

inbound: Specifies the inbound direction.

outbound: Specifies the outbound direction.

Usage guidelines

If you do not specify the inbound or the outbound keyword, this command enables session logging on both directions.

A maximum of one IPv4 ACL and one IPv6 ACL can be applied to each direction.

If you do not set the traffic threshold or the interval but you enable session logging, the device outputs a session log when a session entry is created or removed.

Examples

# Enable IPv4 session logging in the inbound direction of GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] session log enable ipv4 inbound

# Enable session logging on GigabitEthernet 1/0/2 for IPv4 sessions that match ACL 2050 in the outbound direction.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/2

[Sysname-GigabitEthernet1/0/2] session log enable ipv4 acl 2050 outbound

# Enable session logging on GigabitEthernet 1/0/3 for IPv6 sessions that match ACL 2050 in the outbound direction.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/3

[Sysname-GigabitEthernet1/0/3] session log enable ipv6 acl 2050 outbound

Related commands

session log bytes-active

session log packets-active

session log time-active

Session management commands -- session log packets-active

| NOTE: Support for this command depends on the device model.

Use session log packets-active to set the packet-based threshold for traffic-based logging.

Use undo session log packets-active to restore the default.

Syntax

session log packets-active packets-value

undo session log packets-active

Default

The device does not output session logs based on the packet-based threshold.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

packets-value: Specifies the packet-based threshold in the range of 1 to 1000 mega-packets.

Usage guidelines

If you set both the traffic-based and time-based logging, the device outputs a session log when whichever is reached. After outputting a session log, the device resets the traffic counter and restarts the interval for the session.

Only one traffic-based threshold can take effect. If you set both the byte-based and packet-based thresholds, the most recent configuration takes effect.

Examples

# Configure the device to output session logs on a per-10-mega-packet basis.

<Sysname> system-view

[Sysname] session log packets-active 10

Related commands

session log enable

session log time-active

Session management commands -- session log time-active

| NOTE: Support for this command depends on the device model.

Use session log time-active to set the time-based session logging.

Use undo session log time-active to restore the default.

Syntax

session log time-active time-value

undo session log time-active

Default

The device does not output session logs.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

time-value: Specifies the interval in minutes. The value range for the time-value argument is 10 to 120 and the value must be integer times of 10.

Usage guidelines

If you set both time-based and traffic-based logging, the device outputs a session log when whichever is reached. After outputting a session log, the device resets the traffic counter and restarts the interval for the session.

Examples

# Configure the device to output session logs every 50 minutes.

<Sysname> system

[Sysname] session log time-active 50

Related commands

session log enable

session log bytes-active

session log packets-active

Session management commands -- session persistent acl

Use session persistent acl to specify persistent sessions.

Use undo session persistent acl to restore the default.

Syntax

session persistent acl [ ipv6 ] acl-number [ aging-time time-value ]

undo session persistent acl [ ipv6 ]

Default

No persistent sessions exist.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

ipv6: Specifies an IPv6 ACL. To specify an IPv4 ACL, do not specify this keyword.

acl-number: Specifies an ACL by its number in the range of 2000 to 3999.

aging-time time-value: Specifies the aging time for persistent sessions in hours. The value range for the time-value argument is 0 to 360, and the default value is 24. To disable the aging for persistent sessions, set the value to 0.

Usage guidelines

This command is effective only on TCP sessions in ESTABLISHED state.

For a TCP session in ESTABLISHED state, the priority of the aging time is as follows:

· Aging time for persistent sessions.

· Aging time for sessions of application layer protocols.

· Aging time for sessions in different protocol states.

A never-age-out session is not removed until the device receives a connection close request from the initiator or responder, or you manually clear the session entries.

The configuration of persistent sessions applies only to new sessions. It has no effect on existing sessions.

Examples

# Specify IPv4 ACL 2000 for identifying persistent sessions and set the aging time to 72 hours.

<Sysname> system-view

[Sysname] session persistent acl 2000 aging-time 72

# Specify IPv6 ACL 3000 for identifying persistent sessions and set the aging time to 100 hours.

<Sysname> system-view

[Sysname] session persistent acl ipv6 3000 aging-time 100

Related commands

session aging-time application

session aging-time state

Session management commands -- session statistics enable

Use session statistics enable to enable session statistics collection.

Use undo session statistics enable to disable session statistics collection.

Syntax

session statistics enable

undo session statistics enable

Default

Session statistics collection is disabled.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

This command enables the device to collect the session-based outbound and inbound packets and bytes.

To display statistics per session, use the display session table command. To display statistics per packet type, use the display session statistics command.

Examples

# Enable session statistics collection.

<Sysname> system-view

[Sysname] session statistics enable

Related commands

display session statistics

display session table

Session management commands -- session synchronization { dns | http } *

Use session synchronization { dns | http } * to enable session synchronization for DNS, HTTP, or both.

Use undo session synchronization { dns | http } * to disable session synchronization for DNS, HTTP, or both.

Syntax

session synchronization { dns | http } *

undo session synchronization { dns | http } *

Default

Session synchronization is disabled for DNS and HTTP.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

dns: Specifies the DNS protocol.

http: Specifies the HTTP protocol.

Usage guidelines

For this command to take effect, you must also configure the session synchronization enable command.

Use this command to enable session synchronization for DNS and HTTP in the following conditions:

· Users are aware that the current HTTP or DNS sessions will last for a long time.

· HTTP or DNS session backup is required.

This command takes effect only on sessions of the application protocols HTTP and DNS. Sessions of other application protocols will be backed up if the session synchronization enable command is configured.

Examples

# Enable session synchronization for stateful failover, and enable session synchronization for HTTP.

<Sysname> system-view

[Sysname] session synchronization enable

[Sysname] session synchronization http

Related commands

session synchronization enable

Session management commands -- session synchronization enable

Use session synchronization enable to enable session synchronization for stateful failover.

Use undo session synchronization enable to disable session synchronization for stateful failover.

Syntax

session synchronization enable

undo session synchronization enable

Default

Session synchronization for stateful failover is disabled.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

This features enables the master and backup devices to synchronize sessions and dynamic entries of session-based services, such as NAT, ALG, and ASPF.

Examples

# Enable session synchronization for stateful failover.

<Sysname> system-view

<Sysname> session synchronization enable

Session management commands -- session top-statistics enable

| NOTE: Support for this command depends on the device model.

Use session top-statistics enable to enable the top session statistics feature.

Use undo session top-statistics enable to disable the top session statistics feature.

Syntax

session top-statistics enable

undo session top-statistics enable

Default

The top session statistics feature is disabled.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

This command collects the number of sessions for session-based services and ranks the sessions by source address and by destination address.

To display the top session statistics, use the display session top-statistics command.

Examples

# Enable the top session statistics feature.

<Sysname> system-view

[Sysname] session top-statistics enable

Related commands

display session top-statistics