No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Configuration Guide - Network Management and Monitoring

CloudEngine 12800 and 12800E V200R005C10

This document describes the configurations of Network Management and Monitoring, including SNMP, RMON, LLDP, NQA, Service Diagnosis, Mirroring, Packet Capture, sFlow, and NETCONF.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring TCP Flow Aging in Intelligent Traffic Analysis

Configuring TCP Flow Aging in Intelligent Traffic Analysis

Context

When configuring intelligent traffic analysis for TCP flows, you need to configure the TCP flow aging function. When the TCP flow table in the cache meets the aging conditions, the switch sends the flow table in the cache to the TDA.

Intelligent traffic analysis for TCP flows supports the following flow aging modes:

  • Active aging

    The switch needs to periodically export statistics about flows that last for a long time. This aging mode is enabled on the switch by default, and you can set the aging time based on actual requirements.

  • Inactive aging

    Inactive aging clears unnecessary entries in the TCP flow table cache of intelligent traffic analysis so that the switch can fully leverage entry resources. This mode requires the switch to export statistics about the flows that last for a short period. Once a flow stops, the switch exports flow statistics to save memory space. This aging mode is enabled on the switch by default, and you can set the aging time based on actual requirements.

  • FIN- or RST-based aging

    The FIN or RST flag in a TCP packet indicates that the TCP connection is terminated. When receiving a TCP packet with the FIN or RST flag, the switch immediately ages the corresponding intelligent traffic analysis flow to save memory space.

Procedure

  • Configure active aging.
    1. Run system-view

      The system view is displayed.

    2. Run traffic-analysis tcp timeout active active-interval

      The active aging time of a TCP flow is configured.

      By default, the active aging time of a TCP flow is 10 seconds.

    3. Run commit

      The configuration is committed.

  • Configure inactive aging.
    1. Run system-view

      The system view is displayed.

    2. Run traffic-analysis tcp timeout inactive inactive-interval

      The inactive aging time of a TCP flow is configured.

      By default, inactive aging time of a TCP flow is 30 seconds.

    3. Run commit

      The configuration is committed.

  • Configure FIN- and RST-based aging.
    1. Run system-view

      The system view is displayed.

    2. Run traffic-analysis tcp timeout ip tcp-session

      The switch is configured to age a TCP flow based on the FIN or RST flag in the TCP packet header.

      By default, this function is disabled.

    3. Run commit

      The configuration is committed.

Translation
Download
Updated: 2019-04-20

Document ID: EDOC1100075344

Views: 19589

Downloads: 22

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next