udp-timeout

Last updated
Save as PDF

vpn interface nat udp-timeout—Configure when NAT translations over a UDP session time out (on vEdge routers only).

vManage Feature Template

For vEdge routers only:

Configuration ► Templates ► VPN Interface Cellular (for vEdge cellular wireless routers only)
Configuration ► Templates ► VPN Interface Ethernet
Configuration ► Templates ► VPN Interface NAT Pool
Configuration ► Templates ► VPN Interface PPP

Command Hierarchy

vpn vpn-id
  interface interface-name
    nat      
     udp-timeout minutes

Options

Time: minutes
Time after which NAT translations over UDP sessions time out.
Range: 1 through 65536 minutes
Default: 1 minute

Additional Information

You can modify only the TCP and UDP session timeout values. The following NAT session timers are fixed, and you cannot modify them:

TCP session timeout if no SYN-ACK response is received—5 seconds
TCP session timeout if three-way handshaking is not established—10 seconds
TCP session timeout after receiving a FIN/RST packet—30 seconds
ICMP imeout—6 seconds
Other IP timeout—60 seconds

Operational Commands

show ip nat filter
show ip nat interface
show ip nat interface-statistics

Example

Change the NAT translation timeout value for UDP sessions to 1 hour:

vEdge# config
vEdge(config)# vpn 1 interface ge0/4 nat udp-timeout 60
vEdge(config-nat)# show full-configuration
vpn 1
 interface ge0/4
  nat
    udp-timeout 60
  !
 !
!

Release Information

Command introduced in Viptela Software Release 14.2.

Additional Information

See the Configuring Local Internet Exit article for your software release.
tcp-timeout