topic ACE do not clear the inactive UDP session in Application Networking https://community.cisco.com/t5/application-networking/ace-do-not-clear-the-inactive-udp-session/m-p/2021677#M38451 <HTML><HEAD></HEAD><BODY><P>Hi Lukas, </P><P></P><P>Try to add this command to the class-map inside the policy-map multi-match:</P><P></P><P><STRONG>loadbalance vip udp-fast-age</STRONG></P><P></P><P></P><P><A class="jive-link-external-small" href="http://www.cisco.com/en/US/customer/docs/interfaces_modules/services_modules/ace/vA5_1_0/command/reference/policy.html#wp1393857">http://www.cisco.com/en/US/customer/docs/interfaces_modules/services_modules/ace/vA5_1_0/command/reference/policy.html#wp1393857</A></P><P></P><P>--------------------- <BR />Cesar R <BR />ANS Team</P></BODY></HTML> Wed, 10 Oct 2012 20:32:43 GMT Cesar Roque 2012-10-10T20:32:43Z ACE do not clear the inactive UDP session https://community.cisco.com/t5/application-networking/ace-do-not-clear-the-inactive-udp-session/m-p/2021674#M38448 <P>Hello</P><P></P><P>I have an environment in which one host, from the same src ip address and src port, is sending a lot of UDP (Radius) traffic to the VIP:1812.</P><P></P><P>When the rserver for this VIP does not reply to the particular UDP session (for example, the application on the server is busy for more then 10-12 seconds) the ACE saves such session as inactive in the connection table, but it does not clear it after 2 minutes (default UDP timeout).</P><P></P><P>During this time the radius probes send to the rservers are being processed without any problems.</P><P></P><P>Does anybody encounter the same problem ? I would like to know if this behaviour is connected with a bug or I just need to configure some additional feature to fix it.</P><P></P><P>Thank you in advance for any answers</P><P></P><P>PS</P><P></P><P>I am running A2(3.5) version. </P><P></P><P>Regars</P><P></P><P>Lukas</P> Thu, 04 Oct 2012 10:46:46 GMT https://community.cisco.com/t5/application-networking/ace-do-not-clear-the-inactive-udp-session/m-p/2021674#M38448 lukaszkhalil 2012-10-04T10:46:46Z ACE do not clear the inactive UDP session https://community.cisco.com/t5/application-networking/ace-do-not-clear-the-inactive-udp-session/m-p/2021675#M38449 <HTML><HEAD></HEAD><BODY><P> Hey Lukas,</P><P></P><P>Do you have any parameter type connection applied?</P><P></P><P>Is there any other application which reuse Radius traffic or something like that?</P><P></P><P>Jorge</P></BODY></HTML> Thu, 04 Oct 2012 22:51:39 GMT https://community.cisco.com/t5/application-networking/ace-do-not-clear-the-inactive-udp-session/m-p/2021675#M38449 Jorge Bejarano 2012-10-04T22:51:39Z ACE do not clear the inactive UDP session https://community.cisco.com/t5/application-networking/ace-do-not-clear-the-inactive-udp-session/m-p/2021676#M38450 <HTML><HEAD></HEAD><BODY><P>Hello Jorge</P><P></P><P>We do not have any parameter_map aplied to this vip. There should be no other app that reuse this connection.</P><P></P><P>During the problem with this flow, other sources does not have problems with contacting the same vip on port 1812.</P><P></P><P></P><P>Lukas</P></BODY></HTML> Fri, 05 Oct 2012 06:10:35 GMT https://community.cisco.com/t5/application-networking/ace-do-not-clear-the-inactive-udp-session/m-p/2021676#M38450 lukaszkhalil 2012-10-05T06:10:35Z ACE do not clear the inactive UDP session https://community.cisco.com/t5/application-networking/ace-do-not-clear-the-inactive-udp-session/m-p/2021677#M38451 <HTML><HEAD></HEAD><BODY><P>Hi Lukas, </P><P></P><P>Try to add this command to the class-map inside the policy-map multi-match:</P><P></P><P><STRONG>loadbalance vip udp-fast-age</STRONG></P><P></P><P></P><P><A class="jive-link-external-small" href="http://www.cisco.com/en/US/customer/docs/interfaces_modules/services_modules/ace/vA5_1_0/command/reference/policy.html#wp1393857">http://www.cisco.com/en/US/customer/docs/interfaces_modules/services_modules/ace/vA5_1_0/command/reference/policy.html#wp1393857</A></P><P></P><P>--------------------- <BR />Cesar R <BR />ANS Team</P></BODY></HTML> Wed, 10 Oct 2012 20:32:43 GMT https://community.cisco.com/t5/application-networking/ace-do-not-clear-the-inactive-udp-session/m-p/2021677#M38451 Cesar Roque 2012-10-10T20:32:43Z ACE do not clear the inactive UDP session https://community.cisco.com/t5/application-networking/ace-do-not-clear-the-inactive-udp-session/m-p/2021678#M38452 <HTML><HEAD></HEAD><BODY><P>Hello</P><P></P><P>Thank you. Righ now we implemented an ACL which blocks the UDP packet sourced by the rserver to prevent late radius replies.</P><P></P><P>It seems to work fine.</P><P></P><P>Regards</P><P></P><P>Lukas</P></BODY></HTML> Thu, 11 Oct 2012 06:48:12 GMT https://community.cisco.com/t5/application-networking/ace-do-not-clear-the-inactive-udp-session/m-p/2021678#M38452 lukaszkhalil 2012-10-11T06:48:12Z