Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Understanding Policy Application Timeout Configuration and Lookup

    The application timeout value you set for an application determines the session timeout. You can set the timeout threshold for a predefined or custom application; you can use the application default timeout, specify a custom timeout, or use no timeout at all.

    Application timeout values are stored in the root TCP and UDP port-based timeout table and in the protocol-based default timeout table. When you set an application timeout value, Junos OS updates these tables with the new value. There are also default timeout values in the applications entry database, which are taken from predefined applications. You can set a timeout, but you cannot alter a default value.

    Each custom application can be configured with its own custom application timeout. If multiple custom applications are configured with custom timeouts, then each application will have its own custom application timeout.

    If the application that is matched for the traffic has a timeout value, that timeout value is used. Otherwise, the lookup proceeds in the following order until an application timeout value is found:

    1. The root TCP and UDP port-based timeout table is searched for a timeout value.
    2. The protocol-based default timeout table is searched for a timeout value. See Table 1.

      Table 1: Protocol-Based Default Timeout

      Protocol

      Default Timeout (seconds)

      TCP

      1800

      UDP

      60

      ICMP

      60

      OSPF

      60

      Other

      1800

    Published: 2012-06-29