(Optional) Configuring the Aging Time of NAT Mapping Entries
Procedure
- Run system-view
The system view is displayed.
- Run firewall-nat session { { dns | ftp | ftp-data | http | icmp | tcp | tcp-proxy | udp | sip | sip-media | rtsp | rtsp-media | pptp | pptp-data } | { tcp | udp } user-define port-number } aging-time time-value
The aging time of NAT mapping entries is configured.
By default, the aging time of NAT mapping entries for each protocol is as follows: 120 seconds for DNS, 120 seconds for FTP; 120 seconds for FTP-data, 120 seconds for HTTP, 20 seconds for ICMP, 600 seconds for TCP, 10 seconds for TCP-proxy, 120 seconds for UDP, 1800 seconds for SIP, 120 seconds for SIP-media, 60 seconds for RTSP, 120 seconds for RTSP-media, 600 seconds for pptp, and 600 seconds for pptp-data. The default aging time of session entries on a user-defined TCP or UDP port is the same as that of the corresponding protocol.