set aggressive-aging advanced-settings

Description

Configures advanced settings for aggressive aging.

The aggressive aging mechanism closes the connections and removes them from the kernel tables when the specified conditions are met.

Syntax

set aggressive-aging advanced-settings connections

      [ general { true | false } ]

      [ connt-limit-high-watermark-pct 0-100 ]

      [ connt-mem-high-watermark-pct 0-100 ]

      [ tcp-timeout-enable { false | true [ tcp-timeout 0-4294967295 ] } ]

      [ tcp-start-timeout-enable { false | true [ tcp-start-timeout 0-4294967295 ] } ]

      [ tcp-end-timeout-enable { false | true [ tcp-end-timeout 0-4294967295 ] } ]

      [ udp-timeout-enable { false | true [ udp-timeout 0-4294967295 ]

      [ icmp-timeout-enable { false | true [ icmp-timeout 0-4294967295 ] } ]

      [ pending-timeout-enable { false | true [ pending-timeout 0-4294967295 } ]

      [ other-timeout-enable { false | true [ other-timeout 0-4294967295 ] } ]

      [ memory-conn-status { connections | memory | both } ]

      [ log { log | none } ]

Parameters

Parameter

Description

general

Enables (true) or disables (false) the aggressive aging of connections

connt-limit-high-watermark-pct

Configures the connection table percentage limit (between 0 and 100%)

connt-mem-high-watermark-pct

Configures the memory consumption percentage limit (between 0 and 100%)

tcp-timeout-enable

Enables (true) or disables (false) the timeout for TCP sessions

tcp-timeout

Configures the TCP session timeout (between 0 and 4294967295 seconds)

tcp-start-timeout-enable

Enables (true) or disables (false) the timeout for TCP handshakes

tcp-start-timeout

Configures the TCP handshake timeout (between 0 and 4294967295 seconds)

tcp-end-timeout-enable

Enables (true) or disables (false) the timeout for TCP terminations

tcp-end-timeout

Configures the TCP termination timeout (between 0 and 4294967295 seconds)

udp-timeout-enable

Enables (true) or disables (false) the virtual session timeout for UDP connections

udp-timeout

Configures the UDP connections virtual session timeout (between 0 and 4294967295 seconds)

icmp-timeout-enable

Enables (true) or disables (false) the virtual session timeout for ICMP connections

icmp-timeout

Configures the ICMP connections virtual session timeout (between 0 and 4294967295 seconds)

other-timeout-enable

Enables (true) or disables (false) the virtual session timeout for non-TCP/UDP/ICMP connections

other-timeout

Configures the virtual session timeout (between 0 and 4294967295 seconds) for non-TCP/UDP/ICMP connections

pending-timeout-enable

Enables (true) or disables (false) the timeout connections that are pending data

pending-timeout

Configures the timeout (between 0 and 4294967295 seconds) for connections that are pending data

memory-conn-status

Configures when aggressive aging timeouts are enforced:

  • connections - When the number of connections reaches the configured threshold
  • memory - When memory consumption reaches the configured threshold
  • both - When both the number of connections and memory consumption reach the configured thresholds

log

Configures whether to generate a log (log) or not (none) for aggressive aging events

Note - The value 4294967295 is 232-1.

Example

set aggressive-aging advanced-settings connections connt-limit-high-watermark-pct 80 connt-mem-high-watermark-pct 80 tcp-timeout-enable true tcp-timeout 30 tcp-start-timeout-enable true tcp-start-timeout 20 tcp-end-timeout-enable true tcp-end-timeout 60 udp-timeout-enable true udp-timeout 30 icmp-timeout-enable true icmp-timeout 5 other-timeout-enable true other-timeout 40 general true pending-timeout-enable true memory-conn-status both log log