- A virtual community of network engineers
 Home  BookStore  StudyNotes  Links  Archives  StudyRooms  HelpWanted  Discounts  Login
Re: session-timeout or exec-timeout posted 03/25/2006
[Chronological Index] [Thread Index] [Top] [Date Prev][Date Next] [Thread Prev][Thread Next]

Hello John,

a little bit of confusion for me here..

IMO, if we are concerned with vty exec sessions, we should definitely
use exec-timeout.

Now, as for session-timeout, citing from cisco documentation:

"The *session-timeout* command behaves slightly differently on virtual (vty)
terminals than on
physical console, auxiliary (aux), and terminal (tty) lines. When a timeout
occurs on a vty,
the user session returns to the EXEC prompt. When a timeout occurs on
physical lines, the
user session is logged out and the line returned to the idle state. "

"You can use a combination of the *exec-timeout* and *session-timeout* line
commands, set to approximately the same values, to get the same behavior
from virtual
lines that the *session-timeout* command causes on physical lines."

So i tried to nail this down:

R1, R2, R3

R2 telnets to R1 and then to R3

R1 has

line vty 0 4
 session-timeout 1
 exec-timeout 0 0

now, what happens

telnet R2->R1 never times out

but R2->R1->R3 times out in 1 minute, and
we are returned to R2 exec prompt
(session-timeout works this out, as it been cited)

now "exec-timeout" makes all work fine:

exec-timeout 1 0 on R1

disconnects telnet session from R1 and R3 and returns us,
to R2 after 1 minute.

So i would recommend to use session-timeout on physical lines, for
non-exec sessions, and exec-timeout for exec sessions.


2006/3/25, John Matus <John.Matus@xxxxxxxxxx>:
> "disconnect the session after 5 minutes of inactivity"
> do both work??
> session-timeout             Set interval for closing connection when there
> is
>                               no input traffic
> Regards,
> John D. Matus
> Technical Support / PAS
> Fujitsu Consulting
> 626-568-7716
> John.Matus@xxxxxxxxxx
>    This  e-mail  is  intended  solely  for  the  individual  to  whom it
> is
> addressed.   The
> information  contained  in  this  transmission  contains
> confidential  and/or proprietary information or is otherwise privileged.
> If
> the reader of this message is not the intended recipient, please be
> advised
> that  any  dissemination,  distribution  or copying of this transmission
> is
> strictly  prohibited.  If  you  have  received this e-mail in error,
> please
> notify  us immediately by returning it to the sender and deleting this
> copy
> from     your     system.     Thank     you
> for    your    cooperation.
> _______________________________________________________________________
> Subscription information may be found at: