4000 Router Series Security Command Reference

371

• session aging-time state

• session persistent acl

session aging-time state

Use session aging-time state to set the aging time for the sessions in a protocol state.

Use undo session aging-time state to restore the default. If no protocol state is specified, this command

restores all aging time for sessions in different protocol states to the default.

Syntax

session aging-time state { fin | icmp-reply | icmp-request | rawip-open | rawip-ready | syn | tcp-est

| udp-open | udp-ready } time-value

tcp-est | udp-open | udp-ready ]

Default

The aging time for sessions in different protocol states is as follows:

• FIN_WAIT: 30 seconds.

• ICMP-REPLY: 30 seconds.

• ICMP-REQUEST: 60 seconds.

• RAWIP-OPEN: 30 seconds.

• RAWIP-READY: 60 seconds.

• TCP SYN-SENT and SYN-RCV: 30 seconds.

• TCP ESTABLISHED: 3600 seconds.

• UDP-OPEN: 30 seconds.

• UDP-READY: 60 seconds.

Views

System view

Predefined user roles

network-admin

Parameters

fin: Specifies the TCP FIN_WAIT state.

icmp-reply: Specifies the ICMP REPLY state.

icmp-request: Specifies the IGMP REQUEST state.

rawip-open: Specifies the RAWIP-OPEN state.

rawip-ready: Specifies the RAWIP-READY state.

syn: Specifies the TCP SYN-SENT and SYN-RCV states.

tcp-est: Specifies the TCP ESTABLISHED state.

udp-open: Specifies the UDP OPEN state.

udp-ready: Specifies the UDP READY state.

time-value: Sets the aging time in seconds. The value range for the time-value argument is 5 to 100000.