[c-nsp] cisco ssh session timeout

David Prall dcp at dcptech.com
Fri Jan 27 08:19:30 EST 2006


As Jay stated exec-timeout is for connections to the router itself.
Session-timeout is for ppp / vpdn / L2TP sessions.

David

--
David C Prall dcp at dcptech.com http://dcp.dcptech.com
  

> -----Original Message-----
> From: cisco-nsp-bounces at puck.nether.net 
> [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Jay Hennigan
> Sent: Thursday, January 26, 2006 11:39 PM
> To: cisco-nsp at puck.nether.net
> Subject: Re: [c-nsp] cisco ssh session timeout
> 
> Sergey Velikanov [Intelsoft] wrote:
> 
> > I've discovered that my cat3560 do not reset ssh session 
> after timeout
> > 
> > line con 0
> >   exec-timeout 0 0
> > line vty 0 4
> >   session-timeout 480
> >   exec-timeout 0 0
> 
> This means, "Don't time out idle exec sessions."  Change it 
> to something
> reasonable.  First number is minutes, second is seconds.  For example:
>      exec-timeout 60 0
> 
> will time out after one hour idle.
> 
> >   length 0
> >   transport input ssh
> > line vty 5 15
> >   session-timeout 480
> >   exec-timeout 0 0
> 
> Same thing here.
> 
> >   length 0
> >   transport input ssh
> 
> > How can I do that cisco reset idle session after 8 hours?
> 
>     exec-timeout 480 0
> 
> -- 
> Jay Hennigan - CCIE #7880 - Network Administration - jay at west.net
> NetLojix Communications, Inc.  -  http://www.netlojix.com/
> WestNet:  Connecting you to the planet.  805 884-6323
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 



More information about the cisco-nsp mailing list