Configuring timeouts

[emilioj.romero]

Hi All,

I make every week a backup that lasts more than two hours, one of the backup agents remains in idle state over time, to be a tcp connection timeout is set by default to 1 hour.

I changed the configuration of the ASDM conn in Configuration-> Firewall-> Advanced-> Global Timeout and connection to 3:00:00

No problem witch backup, it's all right.

This affects all tcp connections, how I can do to affect only a specific ip and port?

Thanks.

[mirober2]

Hi Emilio,

This can be done under the Configuration > Firewall > Service Policy Rules pane. You'll want to add a new service policy and follow the wizard's prompts to match only your backup traffic (choose "Source and Destination IP Address (uses ACL) for Step 2 - Traffic Classification Criteria).

On the CLI, it will look like the following:

access-list backup-acl permit tcp host  host  eq 
class-map backup-class
    match access-list backup-acl
policy-map backup-policy
    class backup-class
         set connection timeout idle 
service-policy backup-policy interface 

This will only apply the idle timer to the traffic matched by the ACL.

Hope that helps.

-Mike

[emilioj.romero]

Thank you very much, i go to do it