ADTRAN AOS Version R10.1.0 Command Reference Manual page 1210

Command Reference Guide
ipv6 firewall rst-timeout <timeout>
Use the ipv6 firewall rst-timeout command to configure the firewall policy session timeout for a
Transmission Control Protocol (TCP) policy session closed by a RESET (RST). The policy session
timeout determines when the time to live (TTL) for the session expires, and thus ends the session. Using
the no form of this command returns the timeout to the default value. Variations of this command include:
ipv6 firewall rst-timeout <timeout>
ipv6 firewall vrf <name> rst-timeout <timeout>
Syntax Description
<timeout>
vrf <name>
Default Values
By default, the RST timeout is set to 20 seconds.
Command History
Release 18.2
Functional Notes
A TCP policy session closed by an RST is one in which an RST has been received from both endpoints
participating in the session, indicating that enough time has passed to complete the TCP reset process.
This command is used when configuring firewall session timeouts for Internet Protocol version 6 (IPv6).
If the timeout is defined to be zero, the policy session will be deleted immediately without entering a
post-connection state. This could be necessary for hosts that do not implement the TIME_WAIT TCP state
correctly, but instead permit immediately reopening closed sessions.
Usage Examples
The following example changes the IPv6 firewall session timeout for TCP policy sessions closed by a RST
sessions to 30 seconds:
(config)#ipv6 firewall rst-timeout 30
60000CRG0-35E
Specifies the session timeout in seconds. Valid range is 0 to 4294967295
seconds.
Optional. Specifies a nondefault VPN routing and forwarding (VRF) instance on
which to perform the timeout. If no VRF is specified, the action occurs on the
default VRF.
Command was introduced.
Copyright © 2012 ADTRAN, Inc.
Global Configuration Mode Command Set
1210