flow

Defines the session flow timeout interval for different packet types

Supported on the following devices:

Access Points: AP5010, AP310i/e, AP410i/e, AP505i, AP510i, AP510e, AP560i, AP6522, AP6562, AP7161, AP7502, AP7522, AP7532, AP7562, AP7602, AP7612, AP7622, AP763, AP7662, AP8163, AP8543, AP8533.
Service Platforms: NX5500, NX7500, NX9500, NX9600
Virtual Platforms: CX9000, VX9000

Syntax

flow [dhcp|timeout]

flow dhcp stateful

flow timeout [icmp|other|tcp|udp]

flow timeout [icmp|other] <1-32400>

flow timeout udp <15-32400>

flow timeout tcp [close-wait|reset|setup|stateless-fin-or-reset| stateless-general] <1-32400>

flow timeout tcp established <15-32400>

Parameters

flow dhcp stateful


dhcp	Configures DHCP packet flow
stateful	Performs a stateful check on DHCP packets. This feature is enabled by default.

flow timeout [icmp|other] <1-32400>


timeout	Configures a packet timeout
icmp	Configures the timeout for ICMP packets. The default is 30 seconds.
other	Configures the timeout for packets other than ICPM, TCP, or UDP. The default is 30 seconds.
<1-32400>	Specify the timeout from 1 - 32400 seconds.

flow timeout udp <15-32400>


timeout	Configures a packet timeout
udp	Configures the timeout for UDP packets. The default is 30 seconds.
<15-32400>	Specify the timeout from 15 - 32400 seconds.

flow timeout tcp [close-wait|reset|setup|stateless-fin-or-reset|stateless-general] <1-32400>


timeout	Configures a packet timeout
tcp	Configures the timeout for TCP packets
close-wait	Configures the closed TCP flow timeout. The default is 10 seconds.
reset	Configures the reset TCP flow timeout. The default is 10 seconds.
setup	Configures the opening TCP flow timeout. The default is 10 seconds.
stateless-fin-or-reset	Configures stateless TCP flow timeout created with the FIN or RESET packets. The default is 10 seconds.
stateless-general	Configures the stateless TCP flow timeout. The default is 90 seconds (1 m 30s).
<1-32400>	Specify the timeout from 1 - 32400 seconds.

flow timeout tcp established <15-32400>


timeout	Configures the packet timeout
tcp	Configures the timeout for TCP packets
established	Configures the established TCP flow timeout. The default is 5400 seconds.
<15-32400>	Specify the timeout from 15 - 32400 seconds.

Examples

nx9500-6C8809(config-fw-policy-testFW)#flow timeout udp 10000

nx9500-6C8809(config-fw-policy-testFW)#flow timeout icmp 16000

nx9500-6C8809(config-fw-policy-testFW)#flow timeout other 16000

nx9500-6C8809(config-fw-policy-testFW)#flow timeout tcp established 1500

nx9500-6C8809(config-fw-policy-testFW)#show context
firewall-policy testFW
 no ip dos tcp-sequence-past-window
 flow timeout icmp 16000
 flow timeout udp 10000
 flow timeout tcp established 1500
 flow timeout other 16000
 dhcp-offer-convert
 alg facetime
 dns-snoop entry-timeout 1200
nx9500-6C8809(config-fw-policy-testFW)#

Related Commands


no	Removes session timeout intervals configured for different packet types