Configuring Sip Timeout Values; Sip Inspection Enhancement - Cisco 7604 Configuration Manual

SIP Inspection
hostname(config)# policy-map type inspect sip mymap
hostname(config-pmap)# parameters
hostname(config-pmap-p)# no im
hostname(config)# policy-map global_policy
hostname(config-pmap)# class inspection_default
hostname(config-pmap-c)# no inspect sip
hostname(config-pmap-c)# inspect sip mymap
hostname(config)# service-policy global_policy global

Configuring SIP Timeout Values

The media connections are torn down within two minutes after the connection becomes idle. This is,
however, a configurable timeout and can be set for a shorter or longer period of time. To configure the
timeout for the SIP control connection, use the following command:
hostname(config)# timeout sip hh:mm:ss
This command configures the idle timeout after which a SIP control connection is closed.
To configure the timeout for the SIP disconnect, use the following command:
hostname(config)# timeout sip_disconnect hh:mm:ss
This command configures the idle timeout after which SIP media is deleted and media xlates are closed.
Range is from 1 to 10 minutes.
To configure the timeout for the SIP invite, use the following command:
hostname(config)# timeout sip_invite hh:mm:ss
In the absence of the EXPIRE field in the SIP header, this command configures the idle timeout after
which pinholes for provisional responses and media xlates are closed. Range is from 1 to 30 minutes.
Default is 30 minutes.
To configure the timeout for the SIP media timer, use the following command:
hostname(config)# timeout sip_media hh:mm:ss
This command modifies the SIP media idle timer, which determines the time after which the SIP
RTP/RTCP connections are torn down due to inactivity. This command overrides the UDP inactivity
timeout timeout udp command for SIP media connections only. Default timeout value is 2 minutes.
Minimum timeout value is 1 minute. Maximum timeout value is 1193 hours. Value 0 causes SIP media
connections not to timeout.

SIP Inspection Enhancement

The SIP inspection enhancement removes media connections after receiving 200 OK for the BYE SIP
message, 200 OK for the CANCEL SIP message, and 200 OK for 4xx/5xx/6xx SIP messages, instead of
waiting for the idle timeout.
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
22-82
Chapter 22 Applying Application Layer Protocol Inspection
OL-20748-01