How to change NAT translation timeout for UDP from default 60 seconds to something longer?

Billful · ‎08-21-2010

What is the simplest way to change the default NAT translation timeout for UDP?

I would like to set it to something longer (say 300 seconds) than the default 60 seconds.

I'm doing Source NAT on an SRX100 running 10.0R1.8.

Thanks,

Bill

aarseniev · ‎08-21-2009

Hello,

I think this should help:

user@host# set applications application udp300s protocol udp destination-port 1-65535 inactivity-timeout 300

And then match on newly created application udp300s in your policies.

Also, if you have UDP ALGs enabled like SIP ALG, it has more than 1 timeout:

HTH

Regards

Alex

___________________________________
Accept as Solution = cool !
Accept as Solution+Kudo = You are a Star !

Re: How to change NAT translation timeout for UDP from default 60 seconds to something longer?