firewall dynamic-resource used-up alarm fragment-table threshold

Function

The firewall dynamic-resource used-up alarm fragment-table threshold command sets an alarm threshold for the fragmented session table usage.

The undo firewall dynamic-resource used-up alarm fragment-table threshold command restores the alarm threshold for the fragmented session table usage to the default value.

Format

firewall dynamic-resource used-up alarm fragment-table threshold threshold

undo firewall dynamic-resource used-up alarm fragment-table threshold

Parameters

Parameter	Description	Value
threshold	Specifies the alarm threshold of the fragmented session table usage.	The value is an integer ranging from 1% to 100%. The default value is 80%.

Views

System view

Default Level

3: Management level

Usage Guidelines

The default alarm threshold of the fragmented session table usage is 80%. After setting the alarm threshold, you must run the firewall dynamic-resource used-up alarm fragment-table enable or firewall dynamic-resource used-up alarm all enable command to enable the function of sending logs and alarms when the fragmented session table usage reaches the threshold. Otherwise, the system will not send logs or alarms.

When the fragmented session table usage reaches the alarm threshold, the system sends the FRAG/4/FRAG_SESS_EXCEED_THRESHOLD log and the FWD_1.3.6.1.4.1.2011.6.122.15.3.4.10 hwSecStatFragSessOverThreshold alarm. When the fragmented session table usage falls below 95% of the alarm threshold, the system sends the FRAG/4/FRAG_SESS_BELOW_THRESHOLD log and the FWD_1.3.6.1.4.1.2011.6.122.15.3.4.11 hwSecStatFragStaSessBelowThreshold alarm.

Example

# Set the alarm threshold of the fragmented session table usage to 85%.

<sysname> system-view
[sysname] firewall dynamic-resource used-up alarm fragment-table enable
[sysname] firewall dynamic-resource used-up alarm fragment-table threshold 85