what is command timeout on ASA?

rechard_david — Fri, 21 Feb 2020 11:42:44 GMT

Dear All,

I would like to ask you some command as below:

1-timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02?

2-timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00?

3-timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00?

4-timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute?

5-timeout tcp-proxy-reassembly 0:01:00?

now i have problem with VPN site to site, it issue that some application it timeout 2h when it idle..

Could you help me to let me know?

Best Regards,

Rechard

Re: what is command timeout on ASA?

jiaowenbin — Sat, 10 Oct 2009 06:50:46 GMT

Timeout command define several system connection parameters ,such as Xlate ,and above

VPN timeout is due to your IPSec SA , configuration is like this :

crypto isakmp policy xxx

lifetime xxx

lifetime is parameter what you want to change