[c-nsp] service tcp-keepalives-in

[lee.e.rian at census.gov]

> In addtion to other recommendations to this post, add
> to your config:
>
>            service tcp-keepalives-in
>
> ... to reduce the likelihood of hanging vty sessions.

Just out of curiosity, if the router is configured with
      line vty <whatever>
       exec-timeout 10 0
what extra protection does enabling keepalives get you?

I know the recommendation is to enable keepalives, but it seems like if the
terminal isn't answering keepalives the session should time out before it
gets killed by the keep alive timer.

Thanks,
Lee