NSX-T Data Center REST API

FirewallSessionTimerProfile (schema)

Firewall Session timeout profile

A profile holding TCP, UDP and ICMP session timeout configuration.

Name Description Type Notes
_create_time Timestamp of resource creation EpochMsTimestamp Readonly
Sortable
_create_user ID of the user who created this resource string Readonly
_last_modified_time Timestamp of last modification EpochMsTimestamp Readonly
Sortable
_last_modified_user ID of the user who last modified this resource string Readonly
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_protection Indicates protection status of this resource

Protection status is one of the following:
PROTECTED - the client who retrieved the entity is not allowed
to modify it.
NOT_PROTECTED - the client who retrieved the entity is allowed
to modify it
REQUIRE_OVERRIDE - the client who retrieved the entity is a super
user and can modify it, but only when providing
the request header X-Allow-Overwrite=true.
UNKNOWN - the _protection field could not be determined for this
entity.
string Readonly
_revision Generation of this resource config

The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected.
int
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
_system_owned Indicates system owned resource boolean Readonly
description Description of this resource string Maximum length: 1024
Sortable
display_name Identifier to use when displaying entity in logs or GUI

Defaults to ID if not set
string Maximum length: 255
Sortable
icmp_error_reply Timeout after ICMP error

The timeout value for the connection after an ICMP error came back in response to an ICMP packet. The default value for Edges (i.e, Gateway, or Logical Router) may be different than Distributed Firewall hosts.
integer Required
Minimum: 10
Maximum: 4320000
Default: "10"
icmp_first_packet First packet connection timeout

The timeout value of connection in seconds after the first packet. This will be the initial timeout for the new ICMP flow. The default value for Edges (i.e, Gateway, or Logical Router) may be different than Distributed Firewall hosts.
integer Required
Minimum: 10
Maximum: 4320000
Default: "20"
id Unique identifier of this resource string Sortable
resource_type Must be set to the value FirewallSessionTimerProfile string Required
Enum: FirewallSessionTimerProfile, FirewallCpuMemThresholdsProfile, FirewallFloodProtectionProfile, FirewallDnsProfile, GeneralSecuritySettingsProfile
tags Opaque identifiers meaningful to the API user array of Tag Maximum items: 30
tcp_closed Timeout after RST

The timeout value of connection in seconds after one endpoint sends an RST. The default value for Edges (i.e, Gateway, or Logical Router) may be different than Distributed Firewall hosts.
integer Required
Minimum: 10
Maximum: 4320000
Default: "20"
tcp_closing Timeout after first TN

The timeout value of connection in seconds after the first FIN has been sent. The default value for Edges (i.e, Gateway, or Logical Router) may be different than Distributed Firewall hosts.
integer Required
Minimum: 10
Maximum: 4320000
Default: "120"
tcp_established Connection timeout

The timeout value of connection in seconds once the connection has become fully established. The default value for Edges (i.e, Gateway, or Logical Router) may be different than Distributed Firewall hosts.
integer Required
Minimum: 120
Maximum: 4320000
Default: "43200"
tcp_finwait Timeout after FINs exchanged

The timeout value of connection in seconds after both FINs have been exchanged and connection is closed. The default value for Edges (i.e, Gateway, or Logical Router) may be different than Distributed Firewall hosts.
integer Required
Minimum: 10
Maximum: 4320000
Default: "45"
tcp_first_packet Connection timout after first packet

The timeout value of connection in seconds after the first packet has been sent. The default value for Edges (i.e, Gateway, or Logical Router) may be different than Distributed Firewall hosts.
integer Required
Minimum: 10
Maximum: 4320000
Default: "120"
tcp_opening Connection timout after second packet

The timeout value of connection in seconds after a second packet has been transferred. The default value for Edges (i.e, Gateway, or Logical Router) may be different than Distributed Firewall hosts.
integer Required
Minimum: 10
Maximum: 4320000
Default: "30"
udp_first_packet Connection timout after first packet

The timeout value of connection in seconds after the first packet. This will be the initial timeout for the new UDP flow. The default value for Edges (i.e, Gateway, or Logical Router) may be different than Distributed Firewall hosts.
integer Required
Minimum: 10
Maximum: 4320000
Default: "60"
udp_multiple Timeout after hosts sent packet

The timeout value of connection in seconds if both hosts have sent packets. The default value for Edges (i.e, Gateway, or Logical Router) may be different than Distributed Firewall hosts.
integer Required
Minimum: 10
Maximum: 4320000
Default: "60"
udp_single Connection timeout for destination

The timeout value of connection in seconds if the source host sends more than one packet but the destination host has never sent one back. The default value for Edges (i.e, Gateway, or Logical Router) may be different than Distributed Firewall hosts.
integer Required
Minimum: 10
Maximum: 4320000
Default: "30"