< Home

reset firewall ipv6 session table

Function

The reset firewall ipv6 session table command clears the information about IPv6 sessions.

Format

reset firewall ipv6 session table [ vsys vsys ] [ source-zone source-zone | destination-zone destination-zone | { default-policy | policy policy-name } | source { inside start-ipv6-address [ to end-ipv6-address ] | global start-ipv6-address [ to end-ipv6-address ] } | destination { inside start-ipv6-address [ to end-ipv6-address ] | global start-ipv6-address [ to end-ipv6-address ] } | application application-type | slot slot-id cpu cpu-id | protocol { id | tcp | udp | icmp | ah | esp | gre } | service service-type | source-port { inside inside-port-number | global global-port-number } | destination-port { inside inside-port-number | global global-port-number } | interface { interface-name | interface-type interface-number } | vlan vlan-id | created-in time | long-link | user user-name | { local | remote } ] *

reset firewall ipv6 session table all-systems [ source { inside start-ipv6-address [ to end-ipv6-address ] | global start-ipv6-address [ to end-ipv6-address ] } | destination { inside start-ipv6-address [ to end-ipv6-address ] | global start-ipv6-address [ to end-ipv6-address ] } | slot slot-id cpu cpu-id | protocol { id | tcp | udp | icmp | ah | esp | gre } | service service-type | source-port { inside inside-port-number | global global-port-number } | destination-port { inside inside-port-number | global global-port-number } | interface { interface-name | interface-type interface-number } | vlan vlan-id | created-in time | long-link | { local | remote } ] *

reset firewall ipv6 session table session-id session-id

Parameters

Parameter Description Value

session-id session-id

Clears the IPv6 session entries of the specified session ID.

The value must be the ID of an existing session.

all-systems

Display the IPv6 session entries of all systems.

-

vsys vsys

Display the IPv6 session entries of the specified virtual system.

-

source-zone source-zone

Clears the IPv6 session entries with the specified source security zone.

-

destination-zone destination-zone

Clears the IPv6 session entries with the specified destination security zone.

-

default-policy

Clears the IPv6 session entries with the default policy.

-

policy policy-name

Clears the IPv6 session entries with the specified security policy name.

-

source

Clears the IPv6 session entries with the specified source IP address.

-

destination

Clears the IPv6 session entries with the specified destination IP address.

-

inside

Specifies a private IP address.

  • In NAT scenarios, inside refers to the pre-NAT private IP address or the private IP address of the NAT server.
  • In non-NAT scenarios, inside refers to the actual IP address.

In non-NAT scenarios, either inside or global can be specified. These two modes correspond to the same session.

The value is in dotted decimal notation.

global

Specifies a public IP address.

  • In NAT scenarios, global refers to the post-NAT public IP address or the public IP address of the NAT server.
  • In non-NAT scenarios, global refers to the actual IP address.

In non-NAT scenarios, either inside or global can be specified. These two modes correspond to the same session.

The value is in dotted decimal notation.

start-ip-address [ to end-ip-address ]

Specifies the IP address.

If the parameter to end-ip-address is selected, it indicates that the start IP address and the end IP address are specified at the same time.If the parameter to end-ip-address is not selected, it indicates that only the start IP address is specified.

-

application application-type

Clears the IPv6 session entries of the specified application.

-

protocol { id | tcp | udp | icmp | ah | esp | gre }

Clears the IPv6 session entries of the specified protocol.

  • If id is selected, the protocol number is specified.

  • If tcp is selected, TCP session entries are displayed.

  • If udp is selected, UDP session entries are displayed.

  • If sctp is selected, SCTP session entries are displayed.

  • If icmp is selected, ICMP session entries are displayed.

  • If ah is selected, AH session entries are displayed.

  • If esp is selected, ESP session entries are displayed.

  • If gre is selected, GRE session entries are displayed.

The value of id is an integer ranging from 0 to 255.

slot slot-id

Clears the session entries with the specified slot ID.

Only the USG6635E/6655E, USG6680E and USG6712E/6716E support this parameter.

-

cpu cpu-id

Clears the session entries with the specified CPU ID.

Only the USG6635E/6655E, USG6680E and USG6712E/6716E support this parameter.

-

service service-type

Clears the IPv6 session entries of the specified service.

-

source-port

Clears the IPv6 session entries with the specified source port.

-

destination-port

Clears the IPv6 session entries with the specified destination port.

-

inside port-number

Specifies the inside port.

  • In NAT scenarios, global refers to the post-NAT public IP address or the public IP address of the NAT server.
  • In non-NAT scenarios, global refers to the actual IP address.

In non-NAT scenarios, either inside or global can be specified. These two modes correspond to the same session.

The value is an integer ranging from 1 to 65535.

global port-number

Specifies the global port.

  • In NAT scenarios, global refers to the post-NAT public IP address or the public IP address of the NAT server.
  • In non-NAT scenarios, global refers to the actual IP address.

In non-NAT scenarios, either inside or global can be specified. These two modes correspond to the same session.

The value is an integer ranging from 1 to 65535.

vlan vlan-id

Clears all vlan IPv6 session entries.

-

created-in time

Clear the session information created in a specified recent period (in minutes). If time is set to 5, the session information created in the latest 5 minutes is to be cleared.

The value is an integer ranging from 1 to 65535.

long-link

Clears all persistent connection IPv6 session entries.

-

user user-name

Clears the IPv6 session entries of the specified user.

-

local

Clears the IPv6 session table on the local device. The command without local Clears all IPv6 session tables.

-

remote

Clears the backup IPv6 session table on the remote device. The command without remote Clears all IPv6 session tables.

-

Views

User view

Default Level

2: Configuration level

Usage Guidelines

Once statistics are cleared, statistics cannot be restored.

Example

# Clear the statistics of a ipv6 session.

<sysname> reset firewall ipv6 session table
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >