Flex H Models Routing Protocols e.g. BGP

AMI

Update. I installed the latest firmware, but with the previous firmware, it still had total lockup failure after some time. Only way to recover is to cold boot. I will get feedback from the customer if it happens again with the current image.

AMI

But, here is another annoyance. Here are some console settings that are NOT on the web interface:

running network-stack# conntrack
<return> Validate command.
| Add an output modifier.

icmp-timeout Range: 1..300.
Conntrack ICMP timeout.
icmpv6-timeout Range: 1..300.
Conntrack ICMPv6 timeout.
max-entries Range: 16..10000000.
Maximum number of Netfilter conntracks.
tcp-timeout-close Range: 1..300.
Conntrack TCP timeout close.
tcp-timeout-close-wait
Range: 1..300.
Conntrack TCP timeout close wait.
tcp-timeout-established
Range: 1..432000.
Conntrack TCP timeout established.
tcp-timeout-fin-wait Range: 1..300.
Conntrack TCP timeout fin wait.
tcp-timeout-last-ack Range: 1..300.
Conntrack TCP timeout last ack.
tcp-timeout-max-retrans
Range: 1..600.
Conntrack TCP timeout max retrans.
tcp-timeout-syn-recv Range: 1..300.
Conntrack TCP timeout syn recv.
tcp-timeout-syn-sent Range: 1..300.
Conntrack TCP timeout syn sent.
tcp-timeout-time-wait
Range: 1..300.
Conntrack TCP timeout time wait.
tcp-timeout-unacknowledged
Range: 1..600.
Conntrack TCP timeout unacknowledged.
udp-timeout Range: 1..28800.
Conntrack UDP timeout.
udp-timeout-stream Range: 1..28800.
Conntrack UDP timeout stream.

These are important settings in at least some cases, where sessions need to be open longer, so these need to be adjusted.

What i cannot find are the default settings, as they are not visible in the running - but please enlighten me if there is a command to show ALL the config , even with the default values.

There is this UPS software where delivery/pickup orders are uploaded via https.

But the response is slow and it looks like it is running into a TCP timeout on the Firewall side, while the UPS website is keeping the session open which ends up in "blocked" messages in the firewall log and a failed upload.
I had something like this on other firewalls and adjusting the half open sessions to a longer timeout.
But without knowing the default values, it is difficult to figure out what to adjust.

AMI

and what does this mean - IS-IS routing protocol is enabled?

500H running config# vrf main routing isis
<return> Validate command.
| Add an output modifier.

enabled Default: true.
Enable or disable IS-IS.
instance Max count: 4294967295.
Set IS-IS routing instance.

This requires some explanation if this is some internal needed feature, otherwise it should not be enabled as it says per default it IS enabled.