Anantha,

UDP is connectionless so not half-open connections exist.

Regards,
Piotr

2011/1/25 Anantha Subramanian Natarajan <[email protected]>

> Hi All,
>
>   I was going through the Cisco IOS Firewall Feature(CBAC) and understood
> that,there is a global command "ip inspect tcp max-incomplete host value" to
> delete half-open sessions,whenever the number of half-open sessions to the
> specified destination host address rises above a threshold.Am trying to
> understand a similar command exist for UDP,if not ,any specific technical
> reason ,why this command wouldn't be possible for UDP.
>
> Thanks for the great help
>
> Regards
> Anantha Subramanian Natarajan
>
> _______________________________________________
> For more information regarding industry leading CCIE Lab training, please
> visit www.ipexpert.com
>
>
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Reply via email to