beautypg.com

Configuring a session logging policy – H3C Technologies H3C SecPath F1000-E User Manual

Page 929

background image

7

Time threshold: When the lifetime of a session reaches this threshold, a log entry is output for the

session.

Traffic threshold: The traffic threshold can be in units of the number of bytes or the number of packets.
When the traffic of a session reaches the specified number of bytes or packets, a log entry is output

for the session.

With the Output Log Entries for Session Creation and Output Log Entries for Session
Deletion
options, you can specify whether to output logs when a session is created or deleted.

NOTE:

For more information about session management, see

Session Management.

Session logs are output in the format of flow logs. To view session logs, you also need to configure flow
logging.

Perform the tasks in

Table 5

to configure session logging.

Table 5 Session logging configuration task list

Task Remarks

Configuring a Session Logging
Policy

Required
Configure a session logging policy, specifying the source zone and
destination zone of the sessions and the ACL for filtering log entries.
By default, no session logging policy exists.

Setting Session Logging
Thresholds

Required
Configure the time threshold or/and traffic threshold for session logging.
By default, both the time threshold and traffic threshold are 0, meaning that

no session logging entries should be output.

IMPORTANT:

If both the time threshold and traffic threshold are configured, a log entry is
output for the session when it reaches whichever threshold and the
statistics of the session will be cleared.

Configuring a Session Logging Policy

Select Log Report > Session Log > Log Policy from the navigation tree to display existing session
logging policies, as shown in

Figure 4

. Then, click Add to enter the session logging policy configuration

page, as shown in

Figure 5

.

Figure 4 Session logging policy list

This manual is related to the following products: