Step Description Command Keys
10 Determine the size of outstanding
sessions table (optional).
esr(config)# ip firewall sessions
max-expect <COUNT>
<COUNT> – table size, takes
values of [1..8553600].
Default value: 256.
11 Determine the size of trackable
sessions table (optional).
esr(config)# ip firewall sessions
max-tracking <COUNT>
<COUNT> – table size, takes
values of [1..8553600].
Default value: 512000.
12 Determine the lifetime of TCP session
in “connection is being established”
state after which it is considered to be
outdated (optional).
esr(config)# ip firewall sessions
tcp-connect-timeout <TIME>
<TIME> – lifetime of TCP
session in “connection is being
established” state, takes values
in seconds [1..8553600].
Default value: 60 seconds.
13 Determine the lifetime of TCP session
in 'connection is being closed' state
after which it is considered to be
outdated (optional).
esr(config)# ip firewall sessions
tcp-disconnect-timeout <TIME>
<TIME> – lifetime of TCP
session in “connection is being
closed” state, takes values in
seconds [1..8553600].
Default value: 30 seconds.
14 Determine the lifetime of TCP session
in “connection is being established”
state after which it is considered to be
outdated (optional).
esr(config)# ip firewall sessions
tcp-established-timeout <TIME>
<TIME> – lifetime of TCP
session in “connection is being
established” state, takes values
in seconds [1..8553600].
Default value: 120 seconds.
15 Determine the timeout after which the
closed TCP session is actually deleted
from the table of trackable sessions
(optional).
esr(config)# ip firewall sessions
tcp-latecome-timeout <TIME>
<TIME> – timeout, takes value
in seconds [1..8553600].
Default value: 120 seconds.
To Next Page
Loading...
Need help?
General
