01-13-2010 12:28 PM - edited 03-09-2019 10:47 PM
Hi,
I would need to create new TCP ports in CSM to be able to increase the timeout (24 hrs or 86400 sec)
Would it work if I create a new inspect? is it the best way of doing this?
I know we cannot use the "timeout con" attribute (because it will modify ALL TCP timeouts)
Best regards,
01-13-2010 03:07 PM
Yes that is what you want to do. You don't want to change the tcp global timeout.
It will be put in a new class map under a policy map.
It is the "set connection" option under the class-map.
It is under setting the Modular Policy Framework options for connections in CSM.
I hope it helps.
PK
01-14-2010 06:32 AM
Hi PK,
thank you for your quick answer.
I have played with Inspects (Inspection Rules), I have found out that I am limited to 12 hrs as a MAX timeout.
So if I understand correctly, the only way I can configure a single TCP port with a timeout of 24hrs is to configure a MPF ( Modular Policy Framework)
Am I correct?
thanks again
01-14-2010 06:41 AM
Yes, you are correct.
to change timeouts for specific tcp ports you need MPF.
PK
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide