Hi Lee, On Sun, Apr 19, 2009 at 10:53 PM, Lee <ler...@gmail.com> wrote: > What I'd like to know is what extra protection "service > tcp-keepalives-in" gives you that the exec-timeout on the VTYs > doesn't.
Hmm, I guess it might come in useful if you're accessing the vty line via a firewall with particularly aggressive idle TCP session timers? Having said that though, it's not like "service tcp-keepalives (in|out)" can be tuned. The DocCD is quiet on how often the keepalives are sent, too. Old thread: http://puck.nether.net/pipermail/cisco-nsp/2004-July/011508.html <--- is that you? :-) cheers, Dale _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
