show firewall session source
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
525
Alcatel-Lucent
Beta
Beta
OmniAccess 5510 Unified Services Gateway CLI Command Reference Guide
SHOW
FIREWALL
SESSION
SOURCE
show firewall session
[
source
{
ip
<
ip-address>
|
net <ip-address/
prefix-length>
} [{<
1-65535>|proto
{
gre
|
icmp
|
tcp
|
udp
}
|
destination
}]
D
ESCRIPTION
This command is entered in the Super User Mode or Configuration Mode or
Interface Configuration Mode. This command is used to view the firewall session
details given the source address.
P
ARAMETERS
E
XAMPLE
ALU(config-if FastEthernet0)# show firewall session source ip
10.91.1.108
ID 70 ICMP timeout 25 secs, used by NAT
Initiator: (10.91.1.108:13)=>(10.91.0.1:13)
Responder: (10.91.0.1:34416)=>(10.91.1.108:34416)
TCP
-
FIN
-
NO
-
ACK
tcp-fin-no-ack
D
ESCRIPTION
This command is entered in the Firewall-Attack Sub Configuration Mode. TCP
packets without ACK are set for FIN.This leads to system crashing at times. To
avoid this mishap, include the above command in the user-defined attack
prevention list or just use the “default” keyword.
P
ARAMETERS
None.
E
XAMPLE
ALU(config-firewall-attack-A1)# tcp-fin-no-ack
Parameter
Description
ip-address
Source IP address.
ip-address/prefix-length
Source IP address with prefix length.
1-65535
Denotes the port number.
gre
|
icmp
|
tcp
|
udp
Protocol type.
