ADTRAN AOS Version R10.1.0 Command Reference Manual page 1212

Command Reference Guide
ipv6 firewall tcp-unestab-timeout <timeout>
Use the ipv6 firewall tcp-unestab-timeout command to configure the firewall policy session timeout for a
pre-established Transmission Control Protocol (TCP) policy session. The policy session timeout
determines when the time to live (TTL) for the session expires, and thus ends the session. Using the no
form of this command returns the timeout to the default value. Variations of this command include:
ipv6 firewall tcp-unestab-timeout <timeout>
ipv6 firewall vrf <name> tcp-unestab-timeout <timeout>
Syntax Description
<timeout>
vrf <name>
Default Values
By default, the timeout is set to 20 seconds for pre-established TCP firewall sessions.
Command History
Release 18.2
Functional Notes
A pre-established TCP policy session is a firewall session that has been opened by a TCP SYN, on which
the full three-way TCP handshake has not yet been observed. This command is used when configuring
firewall session timeouts for Internet Protocol version 6 (IPv6), and specifies the time period allowed for
TCP to complete the three-way handshake at the beginning of the connection.
Usage Examples
The following example changes the IPv6 firewall session timeout for pre-established TCP sessions to 30
seconds:
(config)#ipv6 firewall tcp-unestab-timeout 30
60000CRG0-35E
Specifies the session timeout in seconds. Valid range is 0 to 4294967295
seconds.
Optional. Specifies a nondefault VPN routing and forwarding (VRF) instance on
which to perform the timeout. If no VRF is specified, the action occurs on the
default VRF.
Command was introduced.
Copyright © 2012 ADTRAN, Inc.
Global Configuration Mode Command Set
1212