From: Petr Lapukhov (petrsoft@gmail.com)
Date: Sat Mar 25 2006 - 07:04:23 GMT-3
Hello John,
a little bit of confusion for me here..
IMO, if we are concerned with vty exec sessions, we should definitely
use exec-timeout.
Now, as for session-timeout, citing from cisco documentation:
"The *session-timeout* command behaves slightly differently on virtual (vty)
terminals than on
physical console, auxiliary (aux), and terminal (tty) lines. When a timeout
occurs on a vty,
the user session returns to the EXEC prompt. When a timeout occurs on
physical lines, the
user session is logged out and the line returned to the idle state. "
"You can use a combination of the *exec-timeout* and *session-timeout* line
configuration
commands, set to approximately the same values, to get the same behavior
from virtual
lines that the *session-timeout* command causes on physical lines."
So i tried to nail this down:
R1, R2, R3
R2 telnets to R1 and then to R3
R1 has
line vty 0 4
session-timeout 1
exec-timeout 0 0
now, what happens
telnet R2->R1 never times out
but R2->R1->R3 times out in 1 minute, and
we are returned to R2 exec prompt
(session-timeout works this out, as it been cited)
now "exec-timeout" makes all work fine:
exec-timeout 1 0 on R1
disconnects telnet session from R1 and R3 and returns us,
to R2 after 1 minute.
So i would recommend to use session-timeout on physical lines, for
non-exec sessions, and exec-timeout for exec sessions.
HTH
Petr
2006/3/25, John Matus <John.Matus@tokiom.com>:
>
> "disconnect the session after 5 minutes of inactivity"
> do both work??
>
> session-timeout Set interval for closing connection when there
> is
> no input traffic
>
>
> Regards,
>
> John D. Matus
> Technical Support / PAS
> Fujitsu Consulting
> 626-568-7716
> John.Matus@tokiom.com
>
>
=============================================================================
===========================
> This e-mail is intended solely for the individual to whom it
> is
> addressed. The
> information contained in this transmission contains
> confidential and/or proprietary information or is otherwise privileged.
> If
> the reader of this message is not the intended recipient, please be
> advised
> that any dissemination, distribution or copying of this transmission
> is
> strictly prohibited. If you have received this e-mail in error,
> please
> notify us immediately by returning it to the sender and deleting this
> copy
> from your system. Thank you
> for your cooperation.
>
>
=============================================================================
===========================
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Sat Apr 01 2006 - 10:07:40 GMT-3