ip inspect tcp max-incomplete host
Defines the maximum number of half-complete TCP sessions that the router allows to the same destination before it begins removing sessions. This command also specifies an amount of time that the router disallows connection to affected hosts after removing sessions to those hosts. The no version restores the default value.
ip inspect tcp max-incomplete host number [ block-time timerValue ]
no ip inspect max-incomplete host
- numberNumber of half-complete TCP sessions that the router allows to the same destination, in the range 15000; default value is 250 sessions
- timerValueAmount of time, in the range 036000 minutes, that the router disallows connection to affected hosts after removing sessions to those hosts; default value is 0 minutes
Global Configuration
Release Information Command introduced before JUNOSe Release 7.1.0.