Configuration of the aging time of unknown protocols on firewalls

For unknown protocols, a firewall uses the UDP aging time by default. To configure the aging time for unknown protocols, run the ip service-set command to define a service set and run the firewall session aging-time service-set command to set the aging time.
Example:
# Set the aging time to 120 seconds for the unknown protocol whose protocol ID is 200.
system-view
[sysname] ip service-set abc type object
[sysname-object-service-set-abc] service 0 protocol 200
[sysname-object-service-set-abc] quit
[sysname] firewall session aging-time service-set abc 120
[sysname] display firewall session aging-time

Scroll to top