RE: session-timeout vs absolute-timeout

From: simon hart (simon.hart@btinternet.com)
Date: Fri Jun 17 2005 - 18:07:46 GMT-3


Hi Tim,

No they are not the same and are functionally different. I shall try and
explain:

absolute-timeout 15

In the situation, anyone who has telneted in will only be allowed on for 15
minutes, and now the important part - irrespective of activity. That means
the time is absolute - you got 15 minutes and thats all!!!

session-timeout 15

This is really an inactivity timer - so I telnet into a router, then go get
a beer watch the football, comeback and find that my session has timed out
because I have been inactive for 15 minutes. (incidentally default is zero
which means it will never time-out, so best to leave it to that if you
intent on watching the footie and drinking beer :) )

HTH

Simon

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
ccie2be
Sent: 17 June 2005 20:59
To: Group Study
Subject: session-timeout vs absolute-timeout

Hi guys,

What's the difference between these 2 config's:

line vty 0 4
 session-timeout 15
 exec-timeout 5 0
 session-disconnect-warning 60
 login local

line vty 0 4
  absolute-timeout 15
  exec-timeout 5 0
  logout-warning 60
  login local

If, in this scenario, these 2 config's are functional equivalent, can
someone explain when and why I would use the first config?

TIA, Tim



This archive was generated by hypermail 2.1.4 : Wed Jul 06 2005 - 14:43:41 GMT-3