|
-
August 4th, 2004, 03:19 PM
#1
Senior Member
Cisco PIX command..
When I telnet into the fire wall i seem to time out after a few min. it just says "lost connection" is there a way to chnage the time out? and I am trying to watch the running logs..what command do i use?
thanks, J
Romans 7:14-20
14 We know that the law is spiritual; but I am unspiritual, sold as a slave to sin. 15 I do not understand what I do. For what I want to do I do not do, but what I hate I do. 16 And if I do what I do not want to do, I agree that the law is good. 17 As it is, it is no longer I myself who do it, but it is sin living in me. 18 I know that nothing good lives in me, that is, in my sinful nature. For I have the desire to do what is good, but I cannot carry it out.
-
August 4th, 2004, 03:45 PM
#2
Perhaps it would be better to setup a syslog server and have the PIX send its status messages and logs to that server, then you would have a historical record of the logs? I can help you with that if you are interested.
You can control the timeouts of telnet, ssh, and the console :
telnet timeout <x>
ssh timeout <x>
console timeout <x>
I would also recommend that you disable telnet and use ssh only to log into the PIX.
nebulus
There is only one constant, one universal, it is the only real truth: causality. Action. Reaction. Cause and effect...There is no escape from it, we are forever slaves to it. Our only hope, our only peace is to understand it, to understand the 'why'. 'Why' is what separates us from them, you from me. 'Why' is the only real social power, without it you are powerless.
(Merovingian - Matrix Reloaded)
-
August 4th, 2004, 03:57 PM
#3
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h323 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
Those are some examples of PIX timeouts
Let me again direct you to this page which tells you how to set up a sylog server on a PIX.
-
August 4th, 2004, 05:02 PM
#4
Since neither of you will say, I will. Hey Jason1977, there's an important tech saying that goes...........RTFM. Not that I'm not willing to help or able to but sheesh, read the manual at least, then if you have questions ask them.
Nice help guys. 
Mankind have a great aversion to intellectual labor; but even supposing knowledge to be easily attainable, more people would be content to be ignorant than would take even a little trouble to acquire it.
- Samuel Johnson
-
August 4th, 2004, 05:37 PM
#5
Actually, Nebulus makes a good point. It's easier to dump out to say something like KIWI-SYSLOG server, www.kiwisyslog.com, a free SYSLOG server for W32. You can then monitor and report on data without having to deal with your production box. I use this technique and it works very well.
Anyway, after you RTFM on your FW device, go ahead and consider this option.
--TH13
Our scars have the power to remind us that our past was real. -- Hannibal Lecter.
Talent is God given. Be humble. Fame is man-given. Be grateful. Conceit is self-given. Be careful. -- John Wooden
-
August 4th, 2004, 07:11 PM
#6
Senior Member
I set up the Sys log server thanks guys!
I am juggling so many things right now reading manuals is hard to do.
Romans 7:14-20
14 We know that the law is spiritual; but I am unspiritual, sold as a slave to sin. 15 I do not understand what I do. For what I want to do I do not do, but what I hate I do. 16 And if I do what I do not want to do, I agree that the law is good. 17 As it is, it is no longer I myself who do it, but it is sin living in me. 18 I know that nothing good lives in me, that is, in my sinful nature. For I have the desire to do what is good, but I cannot carry it out.
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|
Reply With Quote
