flow

Defines the session flow timeout interval for different packet types

Supported in the following platforms:

  • Access Points — AP505i, AP510i/e, AP560i/h
  • Service Platforms — NX5500, NX7500, NX9500, NX9600, VX9000

Syntax

flow [dhcp|timeout] 
flow dhcp stateful 
flow timeout [icmp|other|tcp|udp]
flow timeout [icmp|other] <1-32400>
flow timeout udp <15-32400>
flow timeout tcp [close-wait|reset|setup|stateless-fin-or-reset| stateless-general] <1-32400>
flow timeout tcp established <15-32400>

Parameters

flow dhcp stateful

dhcp

Configures DHCP packet flow

stateful

Performs a stateful check on DHCP packets. This feature is enabled by default.

flow timeout [icmp|other] <1-32400>

timeout

Configures a packet timeout

icmp

Configures the timeout for ICMP packets. The default is 30 seconds.

other

Configures the timeout for packets other than ICPM, TCP, or UDP. The default is 30 seconds.

<1-32400>

Specify the timeout from 1 - 32400 seconds.

flow timeout udp <15-32400>

timeout

Configures a packet timeout

udp

Configures the timeout for UDP packets. The default is 30 seconds.

<15-32400>

Specify the timeout from 15 - 32400 seconds.

flow timeout tcp [close-wait|reset|setup|stateless-fin-or-reset|stateless-general] <1-32400>

timeout

Configures a packet timeout

tcp

Configures the timeout for TCP packets

close-wait

Configures the closed TCP flow timeout. The default is 10 seconds.

reset

Configures the reset TCP flow timeout. The default is 10 seconds.

setup

Configures the opening TCP flow timeout. The default is 10 seconds.

stateless-fin-or-reset

Configures stateless TCP flow timeout created with the FIN or RESET packets. The default is 10 seconds.

stateless-general

Configures the stateless TCP flow timeout. The default is 90 seconds (1 m 30s).

<1-32400>

Specify the timeout from 1 - 32400 seconds.

flow timeout tcp established <15-32400>

timeout

Configures the packet timeout

tcp

Configures the timeout for TCP packets

established

Configures the established TCP flow timeout. The default is 5400 seconds.

<15-32400>

Specify the timeout from 15 - 32400 seconds.

Examples

nx9500-6C8809(config-fw-policy-testFW)#flow timeout udp 10000
nx9500-6C8809(config-fw-policy-testFW)#flow timeout icmp 16000
nx9500-6C8809(config-fw-policy-testFW)#flow timeout other 16000
nx9500-6C8809(config-fw-policy-testFW)#flow timeout tcp established 1500
nx9500-6C8809(config-fw-policy-testFW)#show context
firewall-policy testFW
 no ip dos tcp-sequence-past-window
 flow timeout icmp 16000
 flow timeout udp 10000
 flow timeout tcp established 1500
 flow timeout other 16000
 dhcp-offer-convert
 alg facetime
 dns-snoop entry-timeout 1200
nx9500-6C8809(config-fw-policy-testFW)#

Related Commands

no Removes session timeout intervals configured for different packet types