Early Ageout Time Before The Session's Normal Ageout; Percentage Of Used Sessions Before Early Aging Begins; Percentage Of Used Sessions Before Early Aging Stops; Overview - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual

Related
Documentation
Configuring Features Unsupported in NSM Using Supplemental CLI Options Overview
Related
Documentation
Configuring ScreenOS with TFTP or FTP Servers Enabled Using TFTP/FTP Options
Copyright © 2010, Juniper Networks, Inc.

Early Ageout Time Before the Session's Normal Ageout

Use this aging option to control how the security device uses aggressive aging to age out
a session from its session table. The value range is 2 to 10 units, where each unit is 10
seconds; by default, the early-ageout value is 2 or 20 seconds.

Percentage of Used Sessions Before Early Aging Begins

Use this aging option to control when the security device begins aggressive aging. The
value range is 1 to 100, which indicates percent of the session table capacity. By default,
this option is set to 100% (used sessions must account for 100% of the session table
capacity before aggressive aging begins).

Percentage of Used Sessions Before Early Aging Stops

Use this aging option to control when the security device ends aggressive aging. The
value range is 1 to 100, which indicates percent of the session table capacity. By default,
this option is set to 100% (used sessions must account for 100% of the session table
capacity before aggressive aging ends).
Allocating Network Bandwidth Using Traffic Shaping Options on page 119
Configuring Features Unsupported in NSM Using Supplemental CLI Options Overview
on page 129
Enabling/Disabling Application Layer Gateway Protocols Overview on page 120
Use the supplemental CLI option to configure features on security devices not yet formally
supported in NSM. This applies to security devices running a future release of ScreenOS.
NOTE: We recommend that you use the Supplemental CLI to configure
features in future versions of ScreenOS only. When you perform an update,
the CLI commands that you specify are sent unconditionally to the security
device. NSM does not validate whether or not these commands are sent
successfully. Validation errors may occur if you edit the actual configuration
on the device using the supplemental CLI.
Configuring ScreenOS with TFTP or FTP Servers Enabled Using TFTP/FTP Options on
page 129
Configuring Hostnames and Domain Names Overview on page 130
Using Packet Flow Options on page 122
Use the TFTP/FTP option to configure a security device running to enable TFTP or FTP
servers to save or import external files. These external files include configuration files
Chapter 4: Advanced Network Settings
129