session aging-time

Function

The session aging-time command sets the policy-based session aging time.

The undo session aging-time command cancels the setting.

Format

session aging-time time

undo session aging-time

Parameters

Parameter	Description	Value
time	Specifies the session aging time.	The value is an integer ranging from 1 to 65535, in seconds.

Views

Security policy rule view

Default Level

2: Configuration level

Usage Guidelines

By default, no policy-based session aging time is configured.

On actual networks, the FW needs to clear idle sessions for higher performance, but records the connection status to avoid service interruptions, such as database service. Therefore, the FW provides the policy-based session aging time function to keep specific sessions.

Example

# Set the session aging time to 1000 seconds in security policy a1.

<sysname> system-view
[sysname] security-policy
[sysname-policy-security]rule name a1
[sysname-policy-security-rule-a1] session aging-time 1000