session-limit

Syntax

session-limit {by-destination {hold-time seconds;maximum number;packets number;rate number;}by-pair {hold-time seconds;maximum number;packets number;rate number;}by-source {hold-time seconds;maximum number;packets number;rate number;}}

Hierarchy Level

[edit services ids rule rule-name term term-name then]

Release Information

Statement introduced before Junos OS Release 7.4.

Description

Enable flow limitation by configuring thresholds on source, destination, or stateful firewall and network address translation (NAT) paired traffic flows.

Options

The remaining statements are described separately.

Usage Guidelines

See Configuring Actions in IDS Rules.

Required Privilege Level

interface—To view this statement in the configuration.

interface-control—To add this statement to the configuration.