Avaya FireWall-1 Manual do Utilizador descarregar pdf (Página 56)

Configuring BaySecure FireWall-1

4-4

117384-D Rev 00

Specifying a Timeout Period for an Inactive TCP Connection

If a TCP connection is inactive for a certain period of time, the router sends a TCP

keepalive message, and expects an acknowledgment (ACK) from the management

station. If the router does not receive the ACK from the management station, it

retransmits the keepalive message. If after retransmitting the keepalive message

the router does not receive an ACK from the management station, the TCP

connection is disabled.

You can control the timeout period for an inactive TCP connection using the

following:

• Keepalive timer - specifies the number of seconds that a TCP connection can

remain inactive before the router sends a TCP keepalive message to the

management station.

• Keepalive retransmit timer - specifies

the interval, in seconds, at which a

router retransmits unacknowledged keepalive messages to the management

station.

• Keepalive timer retries -

specifies the number of times to retransmit an

unacknowledged keepalive message.

If after the number of retries the router

does not receive an ACK from the management station, the TCP connection is

disabled.

The following sections describe the BCC commands you can use to control the

timeout period.

Setting the Keepalive Timer

The keepalive timer specifies the number of seconds that a TCP connection can

remain inactive before the router sends a TCP keepalive message to the

management station. The default keepalive timer value is 180 seconds. You can

use the BCC to specify a new value.

Navigate to the firewall prompt (for example,

box

;

firewall

) and enter:

idle-time-keepalive

interval>

interval

is the number of seconds, from 0 to 3600. A value of 0 disables the

keepalive feature.

1 2 ... 51 52 53 54 55 56 57 58 59 60 61 ... 67 68

Sem comentários

Avaya FireWall-1 Manual do Utilizador Página 56