< Home

stream-reassemble session-timeout

Function

The stream-reassemble session-timeout command set the timeout time for out-of-sequence TCP packet inspection.

The undo stream-reassemble session-timeout command restores the default setting.

Format

stream-reassemble session-timeout session-timeout-value

undo stream-reassemble session-timeout

Parameters

Parameter Description Value

session-timeout-value

Specifies the timeout time.

The value is an integer ranging from 0 to 1200, in seconds. The default value is 10.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

By default, out-of-sequence TCP packet inspection is enabled on the FW.

When session-timeout-value is 0, out-of-sequence TCP packet inspection is disabled.

When session-timeout-value is greater than 0 and the time when TCP packets are out of order is smaller than or equal to session-timeout-value, the FW will attempt to reassemble traffic. If the time when TCP packets are out of order is greater than session-timeout-value and service priorities are set on the FW using the engine overload action bypass command, the IAE does not detect the content of traffic and ensures traffic transmission preferentially.

Example

# Set the timeout time for out-of-sequence TCP packet inspection to 20s.

<sysname> system-view
[sysname] stream-reassemble session-timeout 20
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >