Controller loses connection due to IP resets.

Issue:
Controller is configured behind a firewall, the problem is the connection drops several times per day.

Solution:

The latest findings from engineering show that there are 2 items in the firewall settings that can cause the Perle controller to drop off line. The following findings were based on the Cisco PIX firewall configuration, however, other non-Cisco firewalls may also include similar timeout parameters. There are 2 timeout parameters in the firewall configuration that are believed to be causing the problem. The 2 timeout items are called "xlate" and "conn" as shown below:

timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h323 0:05:00 sip 0:30:00 ip_media :02:00
The recommendation is to disable both of the timeout items by specifying "0:00:00" in the firewall configuration.

Note: 24:00:00 will not disable but will keep the sessions open.

 

xlate hh:mm:ss

Idle time until a translation slot is freed.
 This duration must be at least 1 minute.
The default is 3 hours.

 
 

conn hh:mm:ss

 Idle time until a connection slot is freed.
 Use 0:0:0 for the time value to never time out a connection.
This duration must be at least 5 minutes. The default is 1 hour.

 

 

 

 


Article ID:
353
Published:
6/18/2003 12:34:08 PM
Last Modified:
4/2/2004 11:56:20 AM
Issue Type:
FAQ