sctp
语法
sctp {
log (Security SCTP) name;
multichunk-inspection disable;
nullpdu {
protocol (ID-0x0000 | ID-0xFFFF);
}
profile (Security SCTP) name {
association-timeout association-timeout;
drop (Security SCTP) {
m3ua-service name;
payload-protocol name;
}
handshake-timeout handshake-timeout;
limit (Security SCTP) {
address name {
payload-protocol (asap | bicc | ddp-segment | ddp-stream | diameter-dtls | diameter-sctp | dua | enrp | h248 | h323 | id | iua | m2pa | m2ua | m3ua | others | qipc | reserved | s1ap | simco | sua | tali | v5ua | x2ap) {
rate rate;
}
}
payload-protocol (asap | bicc | ddp-segment | ddp-stream | diameter-dtls | diameter-sctp | dua | enrp | h248 | h323 | id | iua | m2pa | m2ua | m3ua | others | qipc | reserved | s1ap | simco | sua | tali | v5ua | x2ap) {
rate rate;
}
rate {
address name {
sccp sccp;
ssp ssp;
sst sst;
}
sccp sccp;
ssp ssp;
sst sst;
}
}
nat-only;
permit (Security SCTP) {
payload-protocol name;
}
}
traceoptions (Security SCTP) {
file <filename> <files files> <match match> <size size> <(world-readable | no-world-readable)>;
flag name;
no-remote-trace;
}
}
层次结构级别
[edit security]
描述
使用流控制传输协议 （SCTP） 命令配置 SCTP 对象、配置 SCTP 日志、设置追踪选项以及设置地址速率限制。
从 Junos OS 20.4R1 版开始， [edit security gprs] 层次结构级别将替换为 [edit security gtp]。
选项
其余语句将单独解释。请参阅 CLI 浏览器。
必需的权限级别
安全性 — 可在配置中查看此语句。
安全控制 — 将此语句添加到配置中。
版本信息
在 Junos OS 10.2 版中引入的语句。支持 nat-only Junos OS 12.1X45-D10 版中添加的选项。支持 profile 在 Junos OS 12.1X46-D10 版中添加的语句。