
C613-50186-01 Rev B
Command Reference for AR2050V
2601
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
F
IREWALL
C
OMMANDS
IP
TCP
TIMEOUT
ESTABLISHED
ip tcp timeout established
Overview
Use this command to set the idle timeout for all established TCP connections.
Use the
no
variant of this command to set the idle timeout back to the default of
3600 seconds.
Syntax
ip tcp timeout established <
1-31536000
>
no ip tcp timeout established
Default
3600 seconds (1 hour)
Mode
Global Configuration
Usage
By default, when a TCP session is successfully established through the firewall,
when the session goes idle, it automatically times out of the firewall connection
tracking table after 3600 seconds. In some situations it may be beneficial to time
out unused established TCP sessions earlier.
For example, in a busy environment where there is an excessive number of
sessions being established, the firewall connection tracking table could become
oversubscribed, with new connections being blocked until older sessions are
timed out.
Example
To set a non-default TCP session timeout for established idle sessions of 1800
seconds (30 minutes), use the commands:
awplus#
configure terminal
awplus(config)#
ip tcp timeout established 1800
Example
To set the TCP session timeout for established idle sessions back to the default
setting of 3600 seconds, use the commands:
awplus#
configure terminal
awplus(config)#
no ip tcp timeout established
Related
Commands
Command
changes
Version 5.4.6-1.1: command added
Parameter
Description
<1-31536000>
Idle timeout for established TCP connections in seconds from 1 to
3153600.