Huawei AR1200-S User Manual

Step 2 Run:
firewall-nat session { dns | ftp | ftp-data | http | icmp | tcp | tcp-proxy | udp
| sip | sip-media | rtsp | rtsp-media } aging-time time-value
The aging time of the firewall session table is set.
By default, the aging time of each protocol is as follows:
l DNS: 120 seconds
l FTP: 120 seconds
l FTP-data: 120 seconds
l HTTP: 120 seconds
l ICMP: 20 seconds
l TCP: 600 seconds
l TCP-proxy: 10 seconds
l UDP: 40 seconds
l SIP: 1800 seconds
l SIP-media: 120 seconds
l RTSP: 60 seconds
l RTSP-media: 120 seconds
NOTE
In general, you do not need to change the aging time of a session table.
----End
3.9.3 Checking the Configuration
After the aging time of the firewall session table is set, you can view the aging time.
Procedure
l Run the display firewall-nat session aging-time command to view the aging time of the
firewall session table.
----End
Example
Run the display firewall-nat session aging-time command to view the aging time of the firewall
session table.
<Huawei> display firewall-nat session aging-time
---------------------------------------------
tcp protocol timeout : 60 (s)
tcp-proxy timeout : 60 (s)
udp protocol timeout : 40 (s)
icmp protocol timeout : 20 (s)
dns protocol timeout : 120 (s)
http protocol timeout : 120 (s)
ftp protocol timeout : 120 (s)
ftp-data protocol timeout : 120 (s)
rtsp protocol timeout : 60 (s)
rtsp-media protocol timeout : 120 (s)
sip protocol timeout : 1800 (s)
Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security 3 Firewall Configuration
Issue 02 (2012-03-30) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
66

Huawei AR1200-S Specifications

General

Brand	Huawei
Model	AR1200-S
Category	Network Router
Language	English