Re: dynamic acl (absolute timeout)

From: Daniel Kutchin (daniel@kutchin.com)
Date: Sun Oct 30 2005 - 19:18:42 GMT-3

Seconded-

Router(config)#access-list 184 dynamic test timeout <absolute-timeout-in
secs>

see also

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00800a5b9a.shtml#lockandkey 

---
Daniel

----- Original Message ----- 
From: "Wang Dehong-DWANG1" <Dehong.Wang@motorola.com>
To: "George Cosmo" <george.cosmo@gmail.com>; "Cisco certification" 
<ccielab@groupstudy.com>
Sent: Sunday, October 30, 2005 10:32 PM
Subject: RE: dynamic acl (absolute timeout)

Wonder whether this is the default idle timeout value.. Try to change
timeout value with access-enable to see this value will change. My
impression is that timeout value in the access-list is absolute timeout,
and timeout in access-enable for idle-timeout. The matched traffic will
change idle timeout to the initial value but not absolute timeout value.
All the time specified here is based on minutes instead of seconds.

HTH

Dehong
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
George Cosmo
Sent: Sunday, October 30, 2005 3:09 PM
To: Cisco certification
Subject: dynamic acl (absolute timeout)

Router(config)#access-list 184 dynamic test2 timeout ?
*<1-9999> Maximum time to live* -------->* is this in minutes . as per
explanation *

then how do i read this:

Router#sh access-lists 184
Extended IP access list 184
permit tcp any host x.x.x.x eq telnet (80 matches) Dynamic test2 permit
ip any any *permit ip any any (40 matches) (time left 277) --> i have
noticed it always starts at 300 ( what is this value)*

is the time left in seconds? or is it is seconds, i should see this
start at 600 sec, as I have set asboulte timeoute to 10 min.

any ideas??

thanks in advance !!!!

This archive was generated by hypermail 2.1.4 : Sun Nov 06 2005 - 22:00:55 GMT-3