Connection Timeouts - MikroTik RouterOS v2.9 Reference Manual

src-address ( read-only: IP address | port ) - the source address and port the connection is
established from
tcp-state ( read-only: text ) - the state of TCP connection
timeout ( read-only: time ) - the amount of time until the connection will be timed out
unreplied ( read-only: true | false ) - shows whether the request was unreplied

Connection Timeouts

Home menu level: /ip firewall connection tracking
Description
Connection tracking provides several timeouts. When particular timeout expires the according entry
is removed from the connection state table. The following diagram depicts typical TCP connection
establishment and termination and tcp timeouts that take place during these processes:
Property Description
enable ( yes | no ; default: yes ) - whether to allow or disallow connection tracking
generic-timeout ( time ; default: 10m ) - maximal amount of time connection state table entry that
keeps tracking of packets that are neither TCP nor UDP (for instance GRE) will survive after
having seen last packet matching this entry. Creating PPTP connection this value will be increased
automaticly
icmp-timeout ( time ; default: 10s ) - maximal amount of time connection tracking entry will
survive after having seen ICMP request
max-entries ( read-only: integer ) - the maximum number of connections the connection state table
can contain, depends on an amount of total memory
tcp-close-timeout ( time ; default: 10s ) - maximal amount of time connection tracking entry will
survive after having seen connection reset request (RST) or an acknowledgment (ACK) of the
connection termination request from connection release initiator
tcp-close-wait-timeout ( time ; default: 10s ) - maximal amount of time connection tracking entry
Page 470 of 695
Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
Other trademarks and registred trademarks mentioned herein are properties of their respective owners.