conntrack

system conntrack

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Connection tracking engine options

system conntrack app-detect

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Application detection

system conntrack app-detect app-id-storage

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Select Application ID storage mode

Instances:

Unique

system conntrack app-detect app-id-storage chained

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

All detected Application ID are stored for the traffic session

system conntrack app-detect app-id-storage override

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Only highest layer Application ID is stored for the traffic session (default behavior)

system conntrack app-detect debug

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Show more verbose log messages

system conntrack app-detect dictionary <u32>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Values:

• u32 – Priority of the dictionary, affects in the search order

Instances:

Unique

system conntrack app-detect dictionary <u32> custom

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Custom application dictionary defined in CLI

system conntrack app-detect dictionary <u32> custom app-id <u32>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Custom Application ID

Values:

• u32 – USER-Defined Selector ID number (0-65535)

Instances:

Multiple

system conntrack app-detect dictionary <u32> custom app-id <u32> fqdn <txt>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Values:

• txt – FQDN or hostname pattern of custom Application ID

Instances:

Multiple

system conntrack app-detect dictionary <u32> custom app-id <u32> name <txt>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Values:

• txt – Name of custom Application ID

system conntrack app-detect dictionary <u32> filename <file>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Values:

• file – Name of local application dictionary file

system conntrack app-detect dictionary <u32> remote

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Application dictionary hosted on a remote server

Required:

Required:

Required:

system conntrack app-detect dictionary <u32> remote alarm

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Alarm triggered according to remote server status

system conntrack app-detect dictionary <u32> remote alarm connection-error <txt>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Alarm triggered when error detected in the connection to the remote server

Reference:

system alarm <txt>

system conntrack app-detect dictionary <u32> remote encrypted-key <password>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Values:

• password – Encrypted key to connect to the application dictionary server

system conntrack app-detect dictionary <u32> remote encrypted-url <password>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Values:

• password – Application dictionary server encrypted url

system conntrack app-detect dictionary <u32> remote key <txt>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Values:

• txt – Key to connect to the application dictionary server

system conntrack app-detect dictionary <u32> remote property

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Classification property retrieved from remote dictionary

Instances:

Unique

system conntrack app-detect dictionary <u32> remote property category

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Retrieve category from remote dictionary

system conntrack app-detect dictionary <u32> remote property reputation

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Retrieve reputation from remote dictionary

system conntrack app-detect dictionary <u32> remote ssl-allow-insecure

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Do not verify the authenticity of the SSL certificate and do not check hostname match

system conntrack app-detect dictionary <u32> remote url <txt>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Values:

• txt – Application dictionary server url

system conntrack app-detect dns

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

DNS detection

system conntrack app-detect dns-host

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

DNS query hostname detection

system conntrack app-detect dns-host disable-continuous-resolution

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Disable continuous resolution of FQDNs to update application IDs

system conntrack app-detect dns-host max-cnames <u32>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Size of DNS CNAME cache

Values:

• u32 – Number of entries allowed in DNS CNAME cache (1-10000)

system conntrack app-detect enable_dict_match_priv_ip

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Allow matches of private ip addresses on no custom dictionaries

system conntrack app-detect http

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

HTTP detection

system conntrack app-detect http-host

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

HTTP Host header detection

system conntrack app-detect http-referer

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

HTTP Referer header detection

system conntrack app-detect http-url

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

HTTP request URL detection

system conntrack app-detect http-user-agent

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

HTTP User-Agent header detection

system conntrack app-detect ip-cache

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Ip-cache configuration

system conntrack app-detect ip-cache blacklist

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Allow to exclude an IP from the ip-cache when App-Id is flapping

system conntrack app-detect ip-cache timeout <u32>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

[Not recommended to set] IP cache entry timeout in seconds.

Values:

• u32 – Timeout in seconds (1-86400)

system conntrack app-detect refresh-flow-appid

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Refresh flow appid when fqdn’s appid is different than ip-cache’s one

system conntrack app-detect ssl

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

SSL/TLS detection

system conntrack app-detect ssl-host

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

SSL/TLS certificate host detection

system conntrack disable

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Disable connection tracking

system conntrack expect-table-size <u32>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Size of connection tracking expect table

Values:

• u32 – Number of entries allowed in connection tracking expect table (1-50000000)

system conntrack hash-size <u32>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Hash size for connection tracking table

Values:

• u32 – Size of hash to use for connection tracking table (1-50000000)

system conntrack logging

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Log conntrack events

system conntrack logging events <txt>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Specify events to capture

Values:

• new – NEW events

• update – UPDATE events

• destroy – DESTROY events

• all – all the previously events

Instances:

Multiple

system conntrack logging identity <txt>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Specify the identity name of the log entries

Values:

• txt – Identity name (1-92)

system conntrack logging log-level <txt>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Specify log level to use (The events will be displayed with the specified level format)

Values:

• err – Error messages

• warning – Warning messages

• notice – Messages for further investigation

• info – Informational messages

• debug – Debug messages

system conntrack modules

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Connection tracking modules settings

system conntrack modules ftp

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

FTP connection tracking settings

system conntrack modules ftp disable

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Disable FTP connection tracking

system conntrack modules h323

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

H.323 connection tracking settings

system conntrack modules h323 disable

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Disable H.323 connection tracking

system conntrack modules pptp

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

PPTP connection tracking settings

system conntrack modules pptp disable

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Disable PPTP connection tracking

system conntrack modules sip

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

SIP connection tracking settings

system conntrack modules sip disable

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Disable SIP connection tracking

system conntrack modules sip enable-indirect-media

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Option to support for indirect media streams

system conntrack modules sip enable-indirect-signalling

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Option to support for indirect signalling streams

system conntrack modules sip port <u32>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Port number that SIP traffic is carried on

Values:

• u32 – SIP port number (1-65535)

Instances:

Multiple

system conntrack modules tftp

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

TFTP connection tracking settings

system conntrack modules tftp disable

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Disable TFTP connection tracking

system conntrack replace-clash

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Enable replace-clash feature

system conntrack table-size <u32>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Size of connection tracking table

Values:

• u32 – Number of entries allowed in connection tracking table (1-50000000)

system conntrack tcp

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

TCP options

system conntrack tcp half-open-connections <u32>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Maximum number of TCP half-open connections

Values:

• u32 – Number of connections (1-2147483647)

system conntrack tcp max-retrans <u32>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

TCP maximum retransmit attempts

Values:

• u32 – Generic connection timeout in seconds (1-2147483647)

system conntrack tcp no-loose

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Do not track previously established connections

system conntrack timeout

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Connection timeout options

system conntrack timeout icmp <u32>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

ICMP timeout in seconds

Values:

• u32 – ICMP timeout in seconds (1-21474836)

system conntrack timeout other <u32>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

Generic connection timeout in seconds

Values:

• u32 – Generic connection timeout in seconds (1-21474836)

system conntrack timeout tcp

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

TCP connection timeout options

system conntrack timeout tcp close <u32>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

TCP CLOSE timeout in seconds

Values:

• u32 – TCP CLOSE timeout in seconds (1-21474836)

system conntrack timeout tcp close-wait <u32>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

TCP CLOSE-WAIT timeout in seconds

Values:

• u32 – TCP CLOSE-WAIT timeout in seconds (1-21474836)

system conntrack timeout tcp established <u32>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

TCP ESTABLISHED timeout in seconds

Values:

• u32 – TCP ESTABLISHED timeout in seconds (1-21474836)

system conntrack timeout tcp fin-wait <u32>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

TCP FIN-WAIT timeout in seconds

Values:

• u32 – TCP FIN-WAIT timeout in seconds (1-21474836)

system conntrack timeout tcp last-ack <u32>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

TCP LAST-ACK timeout in seconds

Values:

• u32 – TCP LAST-ACK timeout in seconds (1-21474836)

system conntrack timeout tcp syn-recv <u32>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

TCP SYN-RECEIVED timeout in seconds

Values:

• u32 – TCP SYN-RECEIVED timeout in seconds (1-21474836)

system conntrack timeout tcp syn-sent <u32>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

TCP SYN-SENT timeout in seconds

Values:

• u32 – TCP SYN-SENT timeout in seconds (1-21474836)

system conntrack timeout tcp time-wait <u32>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

TCP TIME-WAIT timeout in seconds

Values:

• u32 – TCP TIME-WAIT timeout in seconds (1-21474836)

system conntrack timeout udp

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

UDP timeout

system conntrack timeout udp other <u32>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

UDP generic timeout in seconds

Values:

• u32 – UDP generic timeout in seconds (1-21474836)

system conntrack timeout udp stream <u32>

AresC640 Atlas840 H5-Rail M10-Smart M2 M20 RS420 RXL15000 SDE VM

UDP stream timeout in seconds

Values:

• u32 – UDP stream timeout in seconds (1-21474836)