ip-address { mask-length | mask }: Specifies a subnet IPv4 address. The mask-length argument specifies the subnet mask length, in the range of 0 to 32. The mask argument specifies the subnet mask of an IPv4 address, in dotted decimal notation. If you do not specify mask-length as 32 or mask as 255.255.255.255, this command specifies an internal IPv4 host address.

Usage guidelines

If you execute this command multiple times, you can specify multiple subnet addresses for internal IPv4 assets.

Examples

# Specify IPv4 subnet address 192.167.0.0 with a mask length of 24 as the address range for internal IPv4 addresses.

<Sysname> system-view

[Sysname] asset-manage asset-scope ipv4 subnet 192.167.0.0 24

asset-manage asset-scope ipv6 subnet

Use asset-manage asset-scope ipv6 subnet to specify the address range of internal IPv6 assets.

Use undo asset-manage asset-scope ipv6 subnet to restore the default.

Syntax

asset-manage asset-scope ipv6 subent { ipv6-address prefix-length | ipv6-address/prefix-length }

undo asset-manage asset-scope ipv6 subent { ipv6-address prefix-length | ipv6-address/prefix-length }

Default

No address range of internal IPv6 assets is configured and the device assumes no internal IPv6 assets exist.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

ipv6-address prefix-length: Specifies a subnet IPv6 address. The Prefix-length argument represents the prefix length, in the range of 1 to 128. If the prefix-length argument is set to 128, the address is considered as an IPv6 host address.

Usage guidelines

If you execute this command multiple times, you can specify multiple subnet addresses for internal IPv6 assets.

Examples

# Specify IPv6 subnet 168:168:: with the prefix length of 32 as the address range for internal IPv6 assets.

<Sysname> system-view

[Sysname] asset-manage asset-scope ipv6 subnet 168:168:: 32

dac email-server client-authentication enable

Use dac email-server client-authentication enable to enable email client authentication.

Use undo dac email-server client-authentication enable to disable email client authentication.

Syntax

dac email-server client-authentication enable

undo dac email-server client-authentication enable

Default

Email client authentication is disabled.

Views

System view

Predefined user roles

network-admin

context-admin

Usage guidelines

Enable email client authentication on the device if the email server (specified by the dac email-server server-address command) requires client identity authentication.

For successful email client authentication, you must configure the correct username and password for connecting to the email server.

Examples

# Enable email client authentication.

<Sysname> system-view

[Sysname] dac email-server client-authentication enable

Related commands

dac email-server server-address

dac email-server username

dac email-server password

Use dac email-server password to set the password for connecting to the email server.

Use unto dac email-server password to restore the default.

Syntax

dac email-server password { cipher | simple } string

undo dac email-server password

Default

The password for connecting to the email server is not specified.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

cipher: Specifies a password in encrypted form.

simple: Specifies a password in plaintext form. For security purposes, the password specified in plaintext form will be stored in encrypted form.

string: Specifies the password. Its plaintext form is a case-sensitive string of 1 to 63 characters. Its encrypted form is a case-sensitive string of 1 to 117 characters.

Usage guidelines

Both the username and password for connecting to the email server are required if email client authentication is enabled.

If you configure this command multiple times, the most recent configuration takes effect.

Examples

# Specify abc123 as the password for connecting to the email server.

<Sysname> system-view

[Sysname] dac email-server password simple abc123

Related commands

dac email-server client-authentication enable

dac email-server username

dac email-server secure-authentication enable

Use dac email-server secure-authentication enable to enable secure transmission of authentication credentials.

Use undo dac email-server secure-authentication enable to disable secure transmission of authentication credentials.

Syntax

dac email-server secure-authentication enable

undo dac email-server secure-authentication enable

Default

Secure transmission of authentication credentials is disabled.

Views

System view

Predefined user roles

network-admin

context-admin

Usage guidelines

This command enables the device to transmit email client authentication credentials to the email server over a secure channel.

This command takes effect only after email client authentication is enabled.

Examples

# Enable secure transmission of authentication credentials.

<Sysname> system-view

[Sysname] dac email-server secure-authentication enable

Related commands

dac email-server client-authentication enable

dac email-server sender

Use dac email-server sender to specify the email sender address.

Use undo dac email-server sender to restore the default.

Syntax

dac email-server sender address-string

undo dac email-server sender

Default

The email sender address is not specified.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

address-string: Specifies the email sender address, as case-sensitive string of 3 to 63 characters.

Usage guidelines

The data analysis center (DAC) uses the specified email sender address send emails.

Examples

# Specify [email protected] as the email sender address.

<Sysname> system-view

[Sysname] dac email-server sender [email protected]

Related commands

dac email-server server-address

Use dac email-server server-address to specify the email server address for the DAC.

Use undo dac email-server server-address to restore the default.

Syntax

dac email-server server-address address-string

undo dac email-server server-address

Default

No email server is specified for the DAC.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

address-string: Specifies the IP address or host name of the email server. The host name is a case-sensitive string of 3 to 63 characters.

Usage guidelines

If a host name is used, make sure the device can obtain the IP address of the email server through DNS or DDNS and the device has routes to reach the email server. If the requirements are not met, email sending will fail. For more information about DNS and DDNS, see Layer 3—IP Services Configuration Guide.

The DAC can send emails only after the both email server address and email sender address are configured.

If you configure this command multiple times, the most recent configuration takes effect.

Examples

# Specify 101.1.1.255 as email server address for the DAC.

<Sysname> system-view

[Sysname] dac email-server server-address 101.1.1.225

Related commands

dac email-server sender

dac email-server username

Use dac email-server username to set the username for connecting to the email server.

Use undo dac email-server username to restore the default.

Syntax

dac email-server username username

undo dac email-server username

Default

The username for connecting to the email server is not specified.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

username: Specifies the username, a case-sensitive string of 1 to 63 characters.

Usage guidelines

If you configure this command multiple times, the most recent configuration takes effect.

Examples

# Specify admin as the username for connecting to the email server.

<Sysname> system-view

[Sysname] dac email-server username admin

Related commands

dac email-server client-authentication enable

dac email-server password

dac log-aggregation enable

Use dac log-aggregation enable to enable log aggregation for a service.

Use undo dac log-aggregation enable disable log aggregation for a service.

Syntax

dac log-aggregation service service-type service-name enable

undo dac log-aggregation service service-type service-name enable

Default

Log aggregation is disabled for a service.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

service-type: Specifies the name of a service type is registered to the DAC, in a case-insensitive string. To obtain the name of a service type, enter a question mark (?) in the place of the service-type argument.

service-name: Specifies the name of a service is registered to the DAC, in a case-insensitive string. To obtain the name of a service, enter a question mark (?) in the place of the service-name argument.

enable: Enables log aggregation.

Usage guidelines

This feature takes effect only after log collection is enabled for a service by using the dac log-collect enable command.

This feature allows the device to aggregate collected service logs within the specified interval to reduce the number of log messages.

Examples

# Enable log aggregation for the traffic service of the DPI type.

<Sysname> system-view

[Sysname] dac log-aggregation service dpi traffic enable

dac log-aggregation interval

Use dac log-aggregation interval to specify a log aggregation interval for a service.

Use undo dac log-aggregation interval to restore the default.

Syntax

dac log-aggregation service service-type service-name interval interval-value

undo dac log-aggregation service service-type service-name interval

Default

The log aggregation interval for a service is 60 seconds.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

service-name: Specifies the name of a service that is registered at the data analysis center, in a case-insensitive string. To obtain the name of a service, enter a question mark (?) in the place of the service-name argument.

interval interval-value: Specifies a log aggregation interval in seconds, in the range of 10 to 60.

Usage guidelines

This feature takes effect only after log aggregation is enabled for a service by using the dac log-aggregation enable command.

If you execute this command multiple times for a service, the most recent configuration takes effect.

Examples

# Specify the log aggregation interval as 30 seconds for the traffic service of the DPI type.

<Sysname> system-view

[Sysname] dac log-aggregation service dpi traffic interval 30

dac log-collect enable

Use dac log-collect enable to enable the log collection for a service that is registered to the DAC.

Use undo dac log-collect enable to disable the log collection for a service.

Syntax

dac log-collect service service-type service-name enable

undo dac log-collect service service-type service-name enable

Default

The log collection status for each service varies by service setting when the service module is registered to the DAC.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

service-type: Specifies the type of a service that is registered to the DAC. The service type name is a case-insensitive string. To view the supported service type, enter a question mark (?) for this argument.

service-name: Specifies the name of a service that is registered to the DAC. The service name is a case-insensitive string. To view the supported service name, enter a question mark (?) for this argument.

Usage guidelines

This command enables the log collection for a specific service. To collect the log messages for the traffic service, first enable the session statistics collection and then enable the log collection.

Repeat this command to enable log collection for multiple services.

Examples

# Enable the log collection for the DPI traffic service.

<Sysname> system-view

[Sysname] dac log-collet service dpi traffic enable

Related commands

display dac log-collect

dac log-display enable

Use dac log-display enable to enable the real-time log display.

Use undo dac log-collect enable to disable the real-time log display.

Syntax

dac log-display service service-type service-name enable

undo dac log-display service service-type service-name enable

Default

The real-time log display for all services is disabled.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

service-type: Specifies the type of a service that is registered with the DAC. The service type name is a case-insensitive string. To view the supported service type, enter a question mark (?) for this argument.

service-name: Specifies the name of a service that is registered with the DAC. The service name is a case-insensitive string. To view the supported service name, enter a question mark (?) for this argument.

Usage guidelines

This command for a service takes effect only after the log collection for the service is enabled by the dac log-collect enable command.

With this feature enabled, you can see the real-time log messages displayed on the Web interface.

Repeat this command to enable real-time log display for multiple services.

DPI do not support this feature in the current software version.

Examples

# Enable the real-time display for system logs.

<Sysname> system-view

[Sysname] dac log-display service syslog syslog enable

Related commands

dac log-collect enable

display dac log-display

dac report

Use dac report to configure the subscription parameters for a report type.

Use undo dac report to remove the subscription parameters for a report type.

Syntax

dac report type { comparison | comprehensive-security | integrated | intelligent | summary } subscriber mail-address [ language { chinese | english } ]

undo dac report type { comparison | comprehensive-security | integrated | intelligent | summary } [ subscriber mail-address ]

Default

No report subscription parameters are configured.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

comparison: Specifies the comparison report.

comprehensive-security: Specifies the comprehensive security report.

integrated: Specifies the integrated report.

intelligent: Specifies the intelligent report.

summary: Specifies the summary report.

subscriber mail-address: Specifies the email address of the report subscriber, a case-sensitive string of 3 to 63 characters. If you do not specify a subscriber, the undo command removes all subscribers for the specified report type.

language: Specifies a language for the reports. If you do not specify this keyword, Chinese is used in the reports.

chinese: Uses Chinese in the reports.

english: Uses English in the reports.

Usage guidelines

You can configure a maximum of 50 subscribers for each report type.

Examples

# Specify [email protected] and English as the subscriber address and language for the summary report, respectively.

<Sysname> system-view

[Sysname] dac report type summary subscriber [email protected] language english

# Remove subscriber address [email protected] for the summary report.

<Sysname> system-view

[Sysname] undo dac report type summary subscriber [email protected]

Related commands

display dac report

dac report export

Use dac report export to configure report export parameters.

Use undo dac report export to delete report export parameters.

Syntax

dac report export period { day | hour | month | quarter | week | year } template template-name [ mail-address mail-address ]

undo dac report export period { day | hour | month | quarter | week | year } template template-name [ mail-address mail-address ]

Default

No report export parameters are configured.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

period: Specifies the type of the periodic report.

day: Specifies the daily report.

hour: Specifies the hourly report.

month: Specifies the monthly report.

quarter: Specifies the quarterly report.

week: Specifies the weekly report.

year: Specifies the annual report.

template template-name: Specifies the template name, a case insensitive string of 1 to 63 characters.

mail-address mail-address: Specifies the mail address to which the reports are exported. The mail address is a case sensitive string of 3 to 63 characters. If you do not specify this option, the reports are exported to the local device.

Usage guidelines

This command enables the device to periodically export the reports of the specified types.

To export reports of the same type or multiple types to multiple mail addresses, repeat this command.

If you do not specify the mail address for the undo command, all mail addresses are deleted.

Examples

# Configure the device to use template template1 to export reports to the address [email protected] every week.

<Sysname> system-view

[Sysname] dac report export period week template template1 mail-address [email protected]

Related commands

display dac report export

dac report export template

Use dac report export template to create a report export template and enter its view, or enter the view of an existing report export template.

Use undo dac report export template to delete a report export template.

Syntax

dac report export template template-name

undo dac report export template template-name

Default

No report export template exists.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

template-name: Specifies the name of a report export template. The name is a case insensitive string of 1 to 63 characters.

Usage guidelines

In a report export template, you can define the following items:

· Report language.

· Statistics contents in the report.

Examples

# Create a report export template named template1, and enter its view.

<Sysname> system-view

[Sysname] dac report export template template1

[Sysname-dac-report-export-template-template1]

Related commands

display dac report export template

dac report top

Use dac report top to specify the number of statistics entries in descending order to be analyzed for a report type.

Use undo dac report top to restore the default.

Syntax

dac report type { comparison | integrated | comprehensive-security | intelligent | summary } top number

undo dac report type { comparison | integrated | comprehensive-security | intelligent | summary } top

Default

Top 5 statistics entries are specified to be analyzed for a report type.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

comparison: Specifies the comparison report.

comprehensive-security: Specifies the comprehensive security report.

integrated: Specifies the integrated report.

intelligent: Specifies the intelligent report.

summary: Specifies the summary report.

top number: Specifies the number of statistics entries in descending order. The value range for the number argument is 5, 10, 15, 20, and 25.

Usage guidelines

This command takes effect only when report subscription settings are configured.

Use this command to specify the range of statistics to be analyzed by a report. For example, if you specify top 20 statistics entries for the summary report, the generated report will contain the analysis results only about these statistics entries from each service.

Examples

# Specify top 5 statistics entries for the comparison report.

<Sysname> system-view

[Sysname] dac report type comparison top 15

Related commands

dac report

display dac report

dac storage

Use dac storage to configure the data storage limits for a service.

Use undo dac storage to restore the default.

Syntax

dac storage service service-type service-name limit { hold-time time-value | usage usage-value | action { delete | log-only } }

undo dac storage service service-type service-name limit { hold-time | usage | action }

Default

The service data can be saved for a maximum of 365 days.

The data of each service can occupy up to 20% of the total storage space.

If the storage time or storage space usage limit is exceeded, the system deletes the expired or the oldest data.

Views

System view

Predefined user roles

network-admin

Parameters

limit: Configures the data storage limits for a service.

hold-time time-value: Specifies the storage time limit in days. The value range is 1 to 65535. The storage time limit should be longer than the number of days that the oldest service data has been stored for.

usage usage-value: Specifies the percentage of the total storage space the service data can occupy. The value range is 1 to 100. The storage usage limit should be higher than the current storage usage of the service.

action: Specifies the action to take when a data storage limit is exceeded.

delete: Deletes data collected on the oldest dates and generates a log message. The data of the current date cannot be deleted.

log-only: Generates a log message only. When a storage limit is exceeded, old data are not deleted and new data cannot be saved.

Usage guidelines

The DAC periodically checks the data of each service to determine if the storage time or storage space usage limit is exceeded.

· If a storage limit is exceeded and the action is delete, the system deletes the expired or the oldest service data. A log will be generated to report the event.

· If a storage limit is exceeded and the action is log-only, the system generates a log message. New data will not be saved.

If you configure this command to set the storage time limit for a service multiple times, the most recent configuration takes effect. The same is true for setting the storage space limit or storage limit-violated action for a service. You can view the storage space usage of each service on the Web interface.

This command is supported only on the default context. For more information about contexts, see context configuration in Virtual Technologies Configuration Guide.

Examples

# Set the storage time limit, storage space limit, and the action to take when the limits are exceeded for the traffic service.

<Sysname> system-view

[Sysname] dac storage service dpi traffic limit hold-time 60

[Sysname] dac storage service dpi traffic limit usage 30

[Sysname] dac storage service dpi traffic limit action delete

dac traffic-statistic enable

Use dac traffic-statistic enable to enable real-time traffic statistics collection.

Use undo dac traffic-statistic enable to disable real-time traffic statistics collection.

Syntax

dac traffic-statistic { application | user } enable [ verbose ]

undo dac traffic-statistic { application | user } enable

Default

The real-time traffic statistics collection is disabled.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

application: Collects application traffic statistics in real time.

user: Collects user traffic statistics in real time.

verbose: Collects detailed traffic information in real time. If you do not specify this keyword, this command collects brief traffic information in real time.

Usage guidelines

To collect the traffic statistics in real time, you must first enable the session statistics collection. For more information about the collected session statistics, see session management in Security Configuration Guide.

The detailed information about user traffic that is collected in real time provides used applications on a per-user basis.

The detailed information about application traffic that is collected in real time provides user information on a per-application basis.

Repeat this command to enable multiple collections of real-time traffic statistics.

Enabling this feature will have an impact on the CPU performance of the device. Make sure you are fully aware of the impact before you enable this feature in high traffic scenarios.

Examples

# Enable the collection of detailed user traffic statistics in real time.

<Sysname> system-view

[Sysname] dac traffic-statistic user enable verbose

Related commands

display dac traffic-statistic

display dac email-server

Use display dac email-server to display the email server configuration of the DAC.

Syntax

display dac email-server

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Examples

# Display the email server configuration of the DAC.

<Sysname> display dac email-server

Mail server address : 2.2.2.2

Mail sender address : [email protected]

Authentication : Enable

secure-authentication : Enable

Username : lkx

password : ******

Table 1 Command output

Field	Description
Authentication	Enabling status of the email client authentication.
Secure-authentication	Enabling status of the secure transmission of authentication credentials.
Username	Username for connecting to the email server.
Password	Password for connecting to the email server.

‌

display dac log-aggregation

Use display dac log-aggregation to display log aggregation configuration for the services that are registered to the DAC.

Syntax

display dac log-aggregation { all | service service-type service-name }

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

all: Specifies all services that are registered to the DAC.

service service-type service-name: Specifies a service by its type and name. The service-type argument specifies the type of a service that is registered to the DAC, in a case-insensitive string. To obtain the name of a service type, enter a question mark (?) in the place of the service-type argument. The service-name argument specifies the name of a service that is registered to the DAC, in a case-insensitive string. To obtain the name of a service, enter a question mark (?) in the place of the service-name argument.

Usage guidelines

This feature allows you to obtain the enabling status of log aggregation for services and the corresponding log aggregation interval.

Examples

# Display log aggregation configuration for all services.

<Sysname> display dac log-aggregation all

Total services :15

Slot 1 :

Service type Service name Status Interval (sec)

dpi data_filter Disabled 60

dpi traffic Enabled 60

dpi waf Disabled 60

dpi url-filter Disabled 60

dpi threat Disabled 60

---- More ----

Table 2 Command output

Field	Description
Total services	Number of services.
Status	Enabling status of log aggregation, including: · Disabled. · Enabled.
Interval (sec)	Log aggregation interval in seconds.

display dac log-collect

Use display dac log-collect to display the log collection configuration for a service.

Syntax

display dac log-collect { all | service service-type service-name }

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

all: Specifies all types of services that are registered with the DAC. The DAC provides functions only for services that have registered with the DAC.

Examples

# Display the log collection configuration for all services.

<Sysname> system-view

[Sysname] display dac log-collect all

Service type Service Status

Slot 1:

dpi audit Disabled

dpi ffilter Disabled

dpi threat Disabled

dpi traffic Enabled

dpi uflt Disabled

Table 3 Command output

Field	Description
Service	Service name.
Status	Status of the log collection: Disabled or Enabled.

‌

Related commands

dac log-collect enable

display dac log-display

Use display dac log-display to display the configuration of the real-time log display.

Syntax

display dac log-display { all | service service-type service-name }

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

all: Specifies all types of services that are registered with the DAC. The DAC provides functions only for services that have registered with the DAC.

Examples

# Display the configuration of the real-time log display.

<Sysname> system-view

[Sysname] display dac log-display syslog syslog

Service type Service Status

Slot 1:

syslog syslog Disabled

syslog cfglog Disabled

Table 4 Command output

Field	Description
Service	Service name.
Status	Status of the log collection: Disabled or Enabled.

‌

Related commands

dac log-display enable

display dac report

Use display dac report to display report subscriber information.

Syntax

display dac report [ comparison | comprehensive-security | integrated | intelligent | summary ]

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

comparison: Specifies the comparison report.

comprehensive-security: Specifies the comprehensive security report.

integrated: Specifies the integrated report.

intelligent: Specifies the intelligent report.

summary: Specifies the summary report.

Usage guidelines

If you do not specify a report type, this command displays subscriber information for all report types.

Examples

# Display subscriber information for all report types.

<Sysname> display dac report

Total subscribers:5

Summary subscribers:1

Comparison subscribers:1

Intelligent subscribers:1

Integrated subscribers:1

comprehensive-security subscribers: 1

Report type Language Top Subscriber email

Summary CH 20 [email protected]

Comparison CH 20 [email protected]

Intelligent EN 15 [email protected]

Integrated EN 25 [email protected]

comprehensive-security EN 25 [email protected]

Table 5 Command output

Field	Description
Total subscribers	Total number of subscribers.
Summary subscribers	Number of subscribers for the summary report.
Comparison subscribers	Number of subscribers for the comparison report.
Intelligent subscribers	Number of subscribers for the intelligent report.
Integrated subscribers	Number of subscribers for the integrated report.
comprehensive-security subscribers	Number of subscribers for the comprehensive security report.
Language	Language used in the reports: · CH—Chinese. · EN—English.
Top	Range of statistics for a report type.
Subscriber email	Email address of a report subscriber.

‌

display dac report export

Use display dac report export to display report export configuration.

Syntax

display dac report export

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Examples

# Display report export configuration.

<Sysname> display dac report export

Mail address: [email protected]

Period: Week, Month, Year

Template name: hhh

Mail address: [email protected]

Period: Day

Template name: 111

Table 6 Command output

Field	Description
Mail-address	Mail address to which the reports are exported. If no mail address is specified, this field displays a hyphen (-), and the reports are exported to the local device.
Period	Type of the periodic report: · hour—Hourly report. · day—Daily report. · week—Weekly report. · month—Monthly report. · quarter—Quarterly report. · year—Annual report.
Template name	Name of the report export template.

‌

Related commands

dac report export

display dac report export template

Use display dac report export template command to display report export templates.

Syntax

display dac report export template [ template-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

template-name: Specifies the name the report export template. The name is a case insensitive string of 1 to 63 characters. If you do not specify a template name, this command exports all report export templates.

Examples

# Display all report export templates.

<Sysname> display dac report export template

Template name: template1

Language: English

Export service: lb-link

Statistics content: app

Link name: link1

Table 7 Command output

Field	Description
Template name	Name of the report export template.
Language	Language used by the report: · Chinese. · English.
Export service	Service that the report is about: · lb-link—Load balancing link. · lb-virtual-server—Load balancing virtual server. This option is not supported in the current software version. · lb-real-server—Load balancing real server. This option is not supported in the current software version. · lb-server-farm—Load balancing server farm. This option is not supported in the current software version. · lb-server-farm-member—Load balancing server farm member. This option is not supported in the current software version.
Statistic content	Statistics content.
Link-name	Load balancing link name.

‌

display dac storage

Use display dac storage to display the data storage limit configuration for services.

Syntax

display dac storage [service-type service-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

Usage guidelines

If you do not specify a service, this command displays the data storage limit configuration for all services.

This command is supported only on the default context. For more information about contexts, see context configuration in Virtual Technologies Configuration Guide.

Examples

# Displays the data storage limit configuration for all services.

<Sysname> display dac storage

Total services :25

Service type Service name Time limit (days) Usage limit

Action

syslog cfglog 365 20%

delete

sandbox log 365 20%

---- More ----

Table 8 Command output

Field	Description
Total services	Total number of services.
Time limit	Storage time limit in days.
Usage limit	Storage space usage limit in percentage.
Action	Action to take when the storage time limit or space limit is exceed. · delete—Delete the oldest data, and generates a log message. · log-only—Generate a log message only.

‌

display dac traffic-statistic

Use display dac traffic-statistic to display the configuration of the real-time traffic statistics collection.

Syntax

display dac traffic-statistic [ application | user ]

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

application: Specifies the collection of the real-time application traffic statistics.

user: Specifies the collection of the real-time user traffic statistics.

Usage guidelines

If you do not specify any keyword, this command displays the configuration of the collection for all real-time traffic statistics.

Examples

# Displays the configuration of the real-time user traffic statistics collection.

<Sysname> system-view

[Sysname] display dac traffic-statistic user

Slot 1:

Type Status

User Enabled (verbose)

Table 9 Command output

Field	Description
Type	Type of traffic collected in real time: · Application. · User.
Status	Status of the real-time traffic statistics collection: · Disabled—This feature is disabled. · Enabled (brief)—This feature is enabled, and the DAC collects brief traffic information. · Enabled (verbose)—This feature is enabled, and the DAC collects detailed traffic information.

Field

Description

Type

Type of traffic collected in real time:

· Application.

· User.

Status

Status of the real-time traffic statistics collection:

· Disabled—This feature is disabled.

· Enabled (brief)—This feature is enabled, and the DAC collects brief traffic information.

· Enabled (verbose)—This feature is enabled, and the DAC collects detailed traffic information.

‌

Related commands

dac traffic-statistic enable

export-service

Use export-service to create the statistics report view of a service and enter the view.

Use undo export-service to delete the configuration in the specified statistics report view.

Syntax

export-service lb-link

undo export-service lb-link

Views

Report export template view

Predefined user roles

network-admin

context-admin

Parameters

lb-link: Specifies the LB link statistics.

Usage guidelines

In the report view of a service, you can specify the statistics contents to be included in the report.

Examples

# In report export template template1, enter the LB link statistics report view.

<Sysname> system-view

[Sysname] dac report export template template1

[Sysname-dac-report-export-template-template1] export-service lb-link

[Sysname-dac-report-export-template-template1-service-lblink]

Related commands

statistics content (LB link statistics report view)

statistics link

language

Use language to specify the language used in exported reports.

Use undo language to restore the default.

Syntax

language { chinese | english }

undo language

Default

Chinese is used.

Views

Report export template view

Predefined user roles

network-admin

context-admin

Parameters

chinese: Specifies Chinese.

english: Specifies English.

Examples

# In report export template template1, specify English as the language used in exported reports.

<Sysname> system-view

[Sysname] dac report export template template1

[Sysname-dac-report-export-template-template1] language english

statistics content (LB link statistics report view)

Use statistics content to specify the contents for the LB link statistics report.

Use undo statistics content to delete contents from the LB link statistics report.

Syntax

statistics content { abnormal-flow | app | connection-count | connection-rate | delay | packetloss | stability } *

undo statistics content { abnormal-flow | app | connection-count | connection-rate | delay | packetloss | stability } *

Default

No content is specified for the LB link statistics report.

Views

LB link statistics report view

Predefined user roles

network-admin

context-admin

Parameters

abnormal: Specifies abnormal traffic statistics.

app: Specifies application statistics.

connection-count: Specifies the connection count statistics.

connection-rate: Specifies the connection rate statistics.

delay: Specifies the delay statistics.

packetloss: Specifies the packet loss statistics.

stability: Specifies link state statistics.

Usage guidelines

This command is required for LB link statistics reports. If no contents are specified, no LB link statistics reports will be exported.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# In LB link statistics report view, specify the application statistics as the report content.

<Sysname> system-view

[Sysname] dac report export template template1

[Sysname-dac-report-export-template-template1] export-service lb-link

[Sysname-dac-report-export-template-template1 statistics content app

statistics link

Use statistics link to specify an LB link for the LB link statistics report.

Use undo statistics link to delete an LB link from the LB link statistics report.

Syntax

statistics link name

undo statistics link name

Default

No LB link is specified for the LB link statistics report.

Views

LB link statistics report view

Predefined user roles

network-admin

context-admin

Parameters

name: Specifies the name of an LB link, a case insensitive string of 1 to 63 characters.

Usage guidelines

This command allows the DAC to export statistics report for the specified LB links.

Repeat this command to specify multiple object links.

Examples

# In LB link statistics report view, specify link1 and link2 as the statistics objects.

[Sysname] dac report export template template1

[Sysname-dac-report-export-template-template1] export-service lb-link

[Sysname-dac-report-export-template-template1-service-lblink] statistics link link1

[Sysname-dac-report-export-template-template1-service-lblink] statistics link link2

Related commands

statistics content (LB link statistics report view)

04-DPI Command Reference

Data analysis center commands

display dac email-server

display dac report

statistics link

Intelligent Terminal Products

Product Support Services

Technical Service Solutions

Resource Center

Policy

Online Help

Become a Partner

Partner Policy & Program

Global Learning

Partner Sales Resources

Service Business

News & Events

Contact Us