779■ If a firewall is configured on an interface and incoming and outgoing IP packetsare denied by the firewall, these IP packets are counted in the firewall-deniedtable.■ If the source or destination IP address of the IP packets passing the interface (inthis case, a firewall may be configured or not) matches a network address inthe rule, the packets are counted in the interior table. Otherwise, the packetsare counted in the exterior table.Note that:■ You can configure up to 32 rules.■ If no rule is configured, the current packets are not concerned and are allcounted in the exterior table.Example # Create an IP accounting rule. system-view[Sysname] ip count rule 169.254.10.1 255.255.0.0ip count timeoutSyntax ip count timeout minutesundo ip count timeoutView System viewParameter minutes: Aging time in minutes for an accounting entry, in the range of 60 to10,080.Description Use the ip count timeout command to configure aging time for an IPaccounting entry.Use the undo ip count timeout command to restore the default.By default, the aging time for an accounting entry is 720 minutes, namely, 12hours.If an accounting entry is not updated before its aging time expires, the entry isconsidered expired and then deleted.Example # Set the aging time for an IP accounting entry to 100 minutes. system-view[Sysname] ip count timeout 100reset ip countSyntax reset ip count { all | exterior | firewall | interior }
