Tim Eberhard <xmi...@gmail.com> writes: > The SRX's behavior is if any packet passes over that session to reset > the timeout on that session, keep alive, data packet, whatever. As > long as it matches that session it will reset the timeout to the > default value and start decrementing again. So I'm not sure what you > mean when it says dropping tcp sessions with active TCP keepalives.
I proposed using TCP keepalives to keep sessions alive. Julien Goodwin informed me that this did not work on the SRX, as of a few years ago. If that is fixed, all is well. None of which has anything to do with tcp-syn-checking. /Benny _______________________________________________ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
