4-43
Cisco Content Services Switch SSL Configuration Guide
OL-5655-01
Chapter 4 Configuring SSL Termination
Configuring Virtual SSL Servers for an SSL Proxy List
Specifying a TCP Inactivity Timeout Value (Client-Side Connection)
The TCP inactivity timeout begins once the CSS receives an ACK from the client
to terminate the TCP three-way handshake. The inactivity timer resumes
immediately following where the SYN timer stops, with regard to traffic flow. Use
the ssl-server number tcp virtual inactivity-timeout seconds command to
specify a timeout value that the CSS uses to terminate a TCP connection with the
client when there is little or no activity occurring on the connection.
Enter a TCP inactivity timeout value in seconds, from 0 (TCP inactivity timeout
disabled) to 3600 (1 hour). The default is 240 seconds.
For example, to configure a TCP inactivity time of 30 minutes (1800 seconds),
enter:
(config-ssl-proxy-list[ssl_list1])# ssl-server 20 tcp virtual
inactivity-timeout 1800
To reset the TCP inactivity timer to the default of 240 seconds, enter:
(config-ssl-proxy-list[ssl_list1])# no ssl-server 20 tcp virtual
inactivity-timeout
Specifying SSL TCP Server-Side Connection Timeout Values
The TCP connection between the CSS and a server is terminated when the
specified time interval elapses. The TCP timeout functions enable you to have
more control over TCP connections between the CSS SSL module and a server.
To configure an SSL proxy list virtual SSL server for termination of a TCP
connection with the server, see the following sections:
• Specifying a TCP SYN Timeout Value (Server-Side Connection)
• Specifying a TCP Inactivity Timeout Value (Server-Side Connection)
To Next Page
Loading...
