topic Default TCP timeout on ACE in Application Networking

Default TCP timeout on ACE

cisco_lite — Thu, 12 Mar 2009 19:53:40 GMT

Hi,

What is the default TCP timeout on ACE and how can I check it. I have the sticky timeout set to 720 minutes. Does it apply to TCP timeout as well.

Re: Default TCP timeout on ACE

Syed Iftekhar Ahmed — Thu, 12 Mar 2009 23:23:39 GMT

The default inactivity timeout are as

follows: TCP:3600sec UDP:120secs ICMP:2sec

These are inactivity timeouts, meaning if the connections are idle for these many seconsds then the connection will be dropped.

If you need a different TCP timeout value, you can change it using the follwoing example

To change TCP idle timeout to 5 minutes

parameter-map type connection TCP-PARAM

set timeout inactivity 300

class-map match-all TCP-CLASS

match port tcp any

policy-map multi-match VIP

class TCP-CLASS

connection advanced TCP-PARAM

HTH

Syed Iftekhar Ahmed

Re: Default TCP timeout on ACE

cisco_lite — Fri, 13 Mar 2009 09:24:01 GMT

Is there any entry to check the default TCP timeout value i.e. 3600 secs.

Re: Default TCP timeout on ACE

Syed Iftekhar Ahmed — Fri, 13 Mar 2009 18:51:40 GMT

If you have not configured parameter-map and applied to policy then ACE will definitely be using default values.

One way of testing it could be to open a new tcp connection and use "show conn detail" commmand with the ip of dest.

show conn detail | beg 10.10.10.10

and look for [idle time : xx:xx:xx].

idle time gives you the inactivity time for this connection.

HTH

Syed Iftekhar Ahmed

Re: Default TCP timeout on ACE

cisco_lite — Fri, 13 Mar 2009 22:23:31 GMT

Hi Syed,

Could you please assist me on the below

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Data%20Center&topic=Application%20Networking&topicID=.ee7814f&fromOutline=&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cd264c8

Thanks.

Default TCP timeout on ACE

andreabat72 — Sat, 01 Oct 2011 15:41:44 GMT

Hi,

good information, but i have a doubt.

I have an existing policy L3/L4 multi-match like the one below.

I would like to increase the inactivity timeout on every TCP connections. Can i nest the new class map (match all) to my policy-map, as shown below in bold?

This can create problems for the existing policy?

Can you confirm me that i can apply only one L3L4 policy map to the interface Vlan?

In necessary to remove and apply the policy to see the effect of the new timeout?

Thanks in advance

Best Regards

policy-map multi-match L4_VIP3_POLICY

description Multi-Match VIPs on Vlan 18 to ServerFarms

class L4-FARM-RDP

loadbalance vip inservice

loadbalance policy L7-FARM-RDP