stream-reassemble session-timeout

Function

The stream-reassemble session-timeout command set the timeout time for out-of-sequence TCP packet inspection.

The undo stream-reassemble session-timeout command restores the default setting.

By default, the timeout time for out-of-sequence TCP packet inspection is 10 seconds.

stream-reassemble session-timeout session-timeout-value

undo stream-reassemble session-timeout

Parameter	Description	Value
session-timeout-value	Specifies the timeout time.	The value is an integer ranging from 0 to 1200, in seconds. The default value is 10.

System view

2: Configuration level

Usage Scenario

By default, out-of-sequence TCP packet inspection is enabled on the switch.

When session-timeout-value is 0, out-of-sequence TCP packet inspection is disabled.
When session-timeout-value is greater than 0 and the time when TCP packets are out of order is smaller than or equal to session-timeout-value, the switch will attempt to reassemble traffic.

Prerequisites

Before running this command, you must run the defence engine enable command to enable the IAE.

# Set the timeout time for out-of-sequence TCP packet inspection to 20 seconds.

<HUAWEI> system-view
[HUAWEI] defence engine enable
[HUAWEI] stream-reassemble session-timeout 20