RE: dynamic acl (absolute timeout)

From: Wang Dehong-DWANG1 (Dehong.Wang@motorola.com)
Date: Sun Oct 30 2005 - 18:32:31 GMT-3


Wonder whether this is the default idle timeout value.. Try to change
timeout value with access-enable to see this value will change. My
impression is that timeout value in the access-list is absolute timeout,
and timeout in access-enable for idle-timeout. The matched traffic will
change idle timeout to the initial value but not absolute timeout value.
All the time specified here is based on minutes instead of seconds.

HTH

Dehong
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
George Cosmo
Sent: Sunday, October 30, 2005 3:09 PM
To: Cisco certification
Subject: dynamic acl (absolute timeout)

Router(config)#access-list 184 dynamic test2 timeout ?
*<1-9999> Maximum time to live* -------->* is this in minutes . as per
explanation *

then how do i read this:

Router#sh access-lists 184
Extended IP access list 184
permit tcp any host x.x.x.x eq telnet (80 matches) Dynamic test2 permit
ip any any *permit ip any any (40 matches) (time left 277) --> i have
noticed it always starts at 300 ( what is this value)*

is the time left in seconds? or is it is seconds, i should see this
start at 600 sec, as I have set asboulte timeoute to 10 min.

any ideas??

thanks in advance !!!!



This archive was generated by hypermail 2.1.4 : Sun Nov 06 2005 - 22:00:55 GMT-3