Solved: Default TCP timeout on ACE

cisco_lite · ‎03-12-2009

Hi,

What is the default TCP timeout on ACE and how can I check it. I have the sticky timeout set to 720 minutes. Does it apply to TCP timeout as well.

Syed Iftekhar Ahmed · ‎03-13-2009

If you have not configured parameter-map and applied to policy then ACE will definitely be using default values.

One way of testing it could be to open a new tcp connection and use "show conn detail" commmand with the ip of dest.

show conn detail | beg 10.10.10.10

and look for [idle time : xx:xx:xx].

idle time gives you the inactivity time for this connection.

HTH

Syed Iftekhar Ahmed

View solution in original post

Syed Iftekhar Ahmed · ‎03-12-2009

The default inactivity timeout are as

follows: TCP:3600sec UDP:120secs ICMP:2sec

These are inactivity timeouts, meaning if the connections are idle for these many seconsds then the connection will be dropped.

If you need a different TCP timeout value, you can change it using the follwoing example

To change TCP idle timeout to 5 minutes

parameter-map type connection TCP-PARAM

set timeout inactivity 300

class-map match-all TCP-CLASS

match port tcp any

policy-map multi-match VIP

class TCP-CLASS

connection advanced TCP-PARAM

HTH

Syed Iftekhar Ahmed

cisco_lite · ‎03-13-2009

Is there any entry to check the default TCP timeout value i.e. 3600 secs.

Syed Iftekhar Ahmed · ‎03-13-2009

If you have not configured parameter-map and applied to policy then ACE will definitely be using default values.

One way of testing it could be to open a new tcp connection and use "show conn detail" commmand with the ip of dest.

show conn detail | beg 10.10.10.10

and look for [idle time : xx:xx:xx].

idle time gives you the inactivity time for this connection.

HTH

Syed Iftekhar Ahmed

cisco_lite · ‎03-13-2009

Hi Syed,

Could you please assist me on the below

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Data%20Center&topic=Application%20Networking&topicID=.ee7814f&fromOutline=&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cd264c8

Thanks.

andreabat72 · ‎10-01-2011

Hi,

good information, but i have a doubt.

I have an existing policy L3/L4 multi-match like the one below.

I would like to increase the inactivity timeout on every TCP connections. Can i nest the new class map (match all) to my policy-map, as shown below in bold?

This can create problems for the existing policy?

Can you confirm me that i can apply only one L3L4 policy map to the interface Vlan?

In necessary to remove and apply the policy to see the effect of the new timeout?

Thanks in advance

Best Regards

policy-map multi-match L4_VIP3_POLICY

description Multi-Match VIPs on Vlan 18 to ServerFarms

class L4-FARM-RDP

loadbalance vip inservice

loadbalance policy L7-FARM-RDP