cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Welcome to Cisco Firewalls Community


231
Views
0
Helpful
2
Replies
Beginner

Configuring timeouts

Hi All,

I make every week a backup that lasts more than two hours, one of the backup agents remains in idle state over time, to be a tcp connection timeout is set by default to 1 hour.

I changed the configuration of the ASDM conn in Configuration-> Firewall-> Advanced-> Global Timeout and connection to 3:00:00

No problem witch backup, it's all right.

This affects all tcp connections, how I can do to affect only a specific ip and port?

Thanks.
2 REPLIES 2
Cisco Employee

Re: Configuring timeouts

Hi Emilio,

This can be done under the Configuration > Firewall > Service Policy Rules pane. You'll want to add a new service policy and follow the wizard's prompts to match only your backup traffic (choose "Source and Destination IP Address (uses ACL) for Step 2 - Traffic Classification Criteria).

On the CLI, it will look like the following:

access-list backup-acl permit tcp host host eq
class-map backup-class
    match access-list backup-acl
policy-map backup-policy
    class backup-class
         set connection timeout idle

This will only apply the idle timer to the traffic matched by the ACL.

Hope that helps.

-Mike

Highlighted
Beginner

Re: Configuring timeouts

Thank you very much, i go to do it