Cisco ACE modules and session timeouts

[dane775]

Does anyone know of a way to increase the session timeouts to the real servers??

We're new to ACE and just getting it deployed in various areas of our network.

We have user's getting disconnected from their apps and at first we thought it had to do with Sticky sessions. Now I don't think so.

We had a user login and sit there for a few minutes and her session timed out. This is a weird app that needs really long session timers...(had to set the session timeout value to 10 hours on the Alteon's we used to use).

Anyone know of a way to increase session timers?

 

[North323]

is this ACE as in XML gateway? the session timeout should be in the app config file

 

[dane775]

No, I'm being told that's another product.

I'm referring to the ACE load balancing module.

 

[m5runner]

Send me the current configs and I'll tell you what needs to be done. There are different types of timers you can use. You can use the idle timer or the sticky timer ( I recommend both at the same time if the connection is going to be anywhere over an hour. If you can copy and paste the configs, I'll tell you what changes you need to make so it can work.

 

[m5runner]

It also depends on if you are SSL session ID. If that's the case, you need to do a generic policy statement along with the SSL sticky. The servers should also be configured to handle the session timers in conjunction to what you have on the ACE. I won't be able to tell 100% until I see the configs.

 

[confusing]

Hi

m5runner, you mention that there are sticky and idle timers.
I am migrating from the Cisco CSM to the ACE.
On the CSM i have the following config:

vserver WAP2MMS
virtual 10.10.10.10 udp dns
serverfarm WAP2_SERV
advertise active
idle 300
replicate csrp connection
persistent rebalance
inservice

I have been looking at the equivalent commands on the ACE and have come up with the following config:

parameter-map type connection CONNECTIONS
set timeout inactivity 300

The parameter map is then applied to the load balancing policy. Is this the correct way to set the idle timer for connections, because as I understand the idle command on the CSM:

"Configures the amount of time (in seconds) that connection information is maintained in the absence of packet activity for a connection."(cisco)

Any help would be greatly appreciated.

thanks

 

[m5runner]

Sorry I didn't get a chance to answer this sooner -

parameter-map connection WAP2MMS
set timeout inactivity 300 <<<---this is seconds


policy-map multi-match [CONNECTION-IP]
class WAP2MMS
loadbalance vip inservice
loadbalance policy WAP2MMS
loadbalance vip icmp-reply active
nat dynamic 1 vlan 1 [if you are doing source nat]
connection advanced=options WAP2MMS

 

[m5runner]

that last command is -

connection advanced-options WAP2MMS


Sorry, I overtyped and hit the "=" button.