About Idle timeout

[engel]

Dear all,

The command "timeout" is for configuring "idle" timeout until the slot is freed.

From the manual, UDP idle timeout is configureable, from the default of 2 minutes. I have the following questions:

1. Does TCP connection idle time-out is configureable or not ?

2. Does it possible to configure UDP or TCP idle timeout base on port number ? For example, TCP port 23 idle timeout is 1 minutes, TCP port 110 idle is 30 seconds, etc.

Appreciate for any help.

Best Regards,

Engel

[steve.barlow]

1.

For IOS:

ip nat translation udp-timeout

ip nat translation dns-timeout

ip nat translation tcp-timeout

ip nat translation finrst-timeout

ip nat translation syn-timeout

ip nat translation icmp-timeout

For PIX:

timeout [xlate [hh:mm:ss]] [conn [hh:mm:ss]] [half-closed [hh:mm:ss]] [udp [hh:mm:ss]] [rpc [hh:mm:ss]] [h323 [hh:mm:ss]] [uauth [hh:mm:ss] [absolute | inactivity]]

2. No, don't think so.

Steve

[jclemmons]

No you cannot configure TCP timeout by port number but TCP timeout value is configurable.

TIMEOUT CONN hh:mm:ss (minimum 5 minutes).

I believe default is one hour.

We've been asking the question as well due to an application problem using Microsoft SNA gateways on inside and client remote desktops on outside segment.