SRX Services Gateway
SRX Services Gateway

ssh timeout srx4600

‎02-07-2019 08:46 AM

Hello,
I wanted to set the timeout of ssh to 4 hours.
When I type the command:

set applications application junos-ssh inactivity-timeout 14400

 

Do I get the following message:

error: cannot use reserved identifier: junos-ssh

Software version is: Junos: 18.4R1.8

 

How did I set the timeout high?

 

Thank you for your help

 

 

3 REPLIES 3
SRX Services Gateway

Re: ssh timeout srx4600

‎02-07-2019 08:59 AM

Create a custom application and use that application in your policy:

set applications application my-ssh protocol tcp destination-port 22 inactivity-timeout 14400

set security policies from-zone A to-zone B policy Allow-SSH match application my-ssh

 

Thanks,
Nellikka
JNCIE x3 (SEC #321; SP #2839; ENT #790)
Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too!!!
SRX Services Gateway

Re: ssh timeout srx4600

‎02-08-2019 03:35 AM

Is there another way?
With our old SRX3600 this worked without a problem.
My problem is that I would have to cash out ssh in my-ssh with a lot of rules.

SRX Services Gateway
Solution
Accepted by topic author ANFAFFM
‎02-08-2019 10:51 AM

Re: ssh timeout srx4600

‎02-08-2019 04:40 AM

Unfortunately there is no other way. Editing pre-defined applications are not not allowed from version 15.1X49 onwards. Please create a custom application if you would like to change inactivity-timeout

Reference: https://kb.juniper.net/InfoCenter/index?page=content&id=KB31225

It is easy replace old application name with new application name. Please use "replace pattern junos-ssh with my-ssh"

Reference: https://kb.juniper.net/InfoCenter/index?page=content&id=KB11711&cat=T_SERIES&actp=LIST

 

 

Thanks,
Nellikka
JNCIE x3 (SEC #321; SP #2839; ENT #790)
Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too!!!