01-13-2010 12:28 PM - edited 03-09-2019 10:47 PM
Hi,
I would need to create new TCP ports in CSM to be able to increase the timeout (24 hrs or 86400 sec)
Would it work if I create a new inspect? is it the best way of doing this?
I know we cannot use the "timeout con" attribute (because it will modify ALL TCP timeouts)
Best regards,
01-13-2010 03:07 PM
Yes that is what you want to do. You don't want to change the tcp global timeout.
It will be put in a new class map under a policy map.
It is the "set connection" option under the class-map.
It is under setting the Modular Policy Framework options for connections in CSM.
I hope it helps.
PK
01-14-2010 06:32 AM
Hi PK,
thank you for your quick answer.
I have played with Inspects (Inspection Rules), I have found out that I am limited to 12 hrs as a MAX timeout.
So if I understand correctly, the only way I can configure a single TCP port with a timeout of 24hrs is to configure a MPF ( Modular Policy Framework)
Am I correct?
thanks again
01-14-2010 06:41 AM
Yes, you are correct.
to change timeouts for specific tcp ports you need MPF.
PK
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: