Re: Lock&key access-list idle timeout

From: David Ankers (d.ankers@xxxxxxxxx)
Date: Mon Feb 12 2001 - 10:39:07 GMT-3


   
Depends what you mean by time out you have got two configured, a 15 mins
absolute time out which will remove the entry regardless after 15mins and a
login timeout of 3 mins, which says if a login is successful, the user has 3
mins to activate the dynamic entry before having to log in again.

If you want 15 mins as the absolute, your config looks fine.

Dave.

On Monday 12 February 2001 02:16, zhuqingliu wrote:
> Hi, all
>
> The lock&key access-list idle timeout doesn't take effectivly.
> ===========================================
> username zql password 0 liming
> !
> access-list 168 permit tcp any host 132.3.3.3 eq telnet
> access-list 168 permit ospf any any
> access-list 168 permit tcp any eq bgp any
> access-list 168 permit tcp any any eq bgp
> access-list 168 permit tcp any eq 2065 any
> access-list 168 permit tcp any any eq 2065
> access-list 168 dynamic testlist timeout 15 permit ip any any
> !
> line vty 0 4
> password cisco
> autocommand access-enable host timeout 3
> ===========================================
> The dynamic access list will timeout within 3 minutes.
>
> IOS version is: 12.0(14)
>
>
>
> Best regards
> Perry.Zhu
>
>



This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:28:45 GMT-3