Configuring AFT logging
For security auditing, you can configure AFT logging to record AFT session information. AFT sessions refer to sessions whose source and destination addresses have been translated by AFT.
To configure AFT logging:
Step | Command | Remarks |
|---|---|---|
1. Enter system view. | system-view | N/A |
2. Enable AFT logging. | aft log enable | By default, AFT logging is disabled. |
3. Enable AFT session establishment logging. | aft log flow-begin | By default, AFT session establishment logging is disabled. |
4. Enable AFT session removal logging. | aft log flow-end | By default, AFT session removal logging is disabled. |