Table of Contents
Advertisement
Command Reference Guide
ip policy-timeout
Use multiple ip policy-timeout command to customize timeout intervals for the established Internet
Protocol version 4 (IPv4) firewall sessions. The policy session timeout determines when the time to live
(TTL) for thee session expires and ends the session. This command configures the policy timeout for the
following protocols: (Transmission Control Protocol (TCP), User Datagram Protocol (UDP), Internet
Control Message Protocol version 4 (ICMPv4), Authentication Header (AH) Protocol, generic routing
encapsulation (GRE), encapsulating security payload (ESP)) or specific services (by listing the particular
port number). Use the no form of this command to return to the default timeout values. Variations of this
command include:
ip policy-timeout [ahp | esp | gre | icmp] <timeout>
ip policy-timeout [tcp | udp] all-ports <timeout>
ip policy-timeout [tcp | udp] <port> <timeout>
ip policy-timeout [tcp | udp] range <beginning port> <ending port> <timeout>
Syntax Description
ahp
esp
gre
icmp
<timeout>
tcp
udp
all-ports
<port>
range
<beginning port>/<ending port>
60000CRG0-35E
Specifies the data protocol as AHP.
Specifies the data protocol as ESP.
Specifies the data protocol as GRE.
Specifies the data protocol as ICMPv4.
Specifies the wait interval (in seconds) before an active session is
closed. Valid range is 0 to 4294967295 seconds.
Specifies the data protocol as TCP. If you are using TCP, you can also
specify the timeout for a specific port, a range of ports, or all TCP ports.
Specifies the data protocol as UDP. If you are using UDP, you can also
specify the timeout for a specific port, a range of ports, or all UDP ports.
Specifies all ports of either TCP or UDP are used if a specific match is
not found.
Specifies a single TCP or UDP port. Keywords are available for
well-known protocols, as those listed below. Valid port range is 0 to
65535.
Customizes timeout intervals for a range of TCP or UDP ports.
Specifies the range of ports, to which to apply the timeout value; valid
only for specifying TCP and UDP services. Valid ports range between 0
and 65535.
The following is the list of TCP port numbers that may be identified
using the text name (in bold):
bgp (Port 179)
chargen (Port 19)
cmd (Port 514)
daytime (Port 13)
discard (Port 9)
Copyright © 2012 ADTRAN, Inc.
Global Configuration Mode Command Set
kshell (Port 544)
login (Port 513)
lpd (Port 515)
nntp (Port 119)
pim-auto-rp (Port 496)
1063
Advertisement
Table of Contents
