[Cisco] [Info] Difference between exec-timeout and session-timeout?

[phatrabt]

Title says it all. Only explanation I've been able to find is that exec-timeout is for VTY (telnet, SSH) and session-timeout is for all sessions. I'm on a variety of equipment (4507's, 7609's) and I need to secure the console against the ability to pick up an active session (meaning that if I lose my connection to the terminal server and go to log back in, I'm right back to where I was without having to input a username and password). One thing is that I was reading and saw that it appears that there is a default timer of 10 minutes on all devices, but that doesn't seem to work for the console port. Thanks for any insight!

 

[spidey07]

The exec timeout is for the shell that you created.

 

[nweaver]

the exec timeout is how long your enabled prompt lasts, i.e. after that timeout, it drops you back to a disabled prompt, regardless of connection.

 

[spidey07]

The exec closes the shell. That's what exec is.

session-timeout closes the actual connection and isn't normally set.

You can verify these timers with the "show line" command.

 

[nweaver]

Originally posted by: spidey07
The exec closes the shell. That's what exec is.

session-timeout closes the actual connection and isn't normally set.

You can verify these timers with the "show line" command.

Yes, I was misunderstanding exec-timeout. I used to set it when consoled into AP's for testing, as it made it easier to keep moving along. What you said makes more sense then what I said.