Setting NAT UDP Timeout

Forum|Forum|7 years ago
March 28, 2019
3 replies
36265 views

My VOIP vendor states that 2% of calls are not getting a response. They state that it is probably a problem with the "NAT UDP pinhole timeout". They recommend a value of 60 to 300 seconds. I do not find a place to set the UDP timeout value.

I was hoping to set a rule between the interfaces with the source being the phone network and the destination being the VOIP provider with the correct services and an elevated timeout value they are looking for. I do not see anywhere the UDP timeout can be set at the rule, destination address or service level. Is this a system wide setting (which I cannot find either)?

Toshi_Esumi

SuperUser

https://help.fortinet.com/cli/fos60hlp/60/Content/FortiOS/fortiOS-cli-ref/config/system/session-ttl.htm

The answer is in above online help. But the default timer is 3600 as in the doc. So something else it going on.

MarkBAuthor

New Member

For anyone following. The document above is talking about the session-ttl. That is not the same as the UDP or ICMP ttl. So what finally solved the issue was the following:

config sys global

set udp-idle-timer 300

end

Toshi_Esumi

SuperUser

hmm, I thought they're the same but sys global setting sets session ttl timer for everything while the other overrides on top more granularly. The manual below says this:

https://help.fortinet.com/cli/fos60hlp/60/Content/FortiOS/fortiOS-cli-ref/config/system/global.htm

"set udp-idle-timer {integer} UDP connection session timeout. This command can be useful in managing CPU and memory resources (1 - 86400 seconds (1 day), default = 60). range[1-86400]"

Sign up

Login with SSO

Login to the community

Login with SSO