Timeout

This scenario shows how to configure the timeout option in the system offload feature.

Test Expired Offloaded-Flows

Description

In this scenario, the timeout is configured using a low value (only 5 seconds). The default value is 30 seconds. Then, a SSH connection is started from DUT1 to DUT2 to check if the accelerated flow expires after a while.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.0.0.1/24
set interfaces ethernet eth1 address 20.0.0.1/24
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system offload timeout 5

Step 2: Set the following configuration in DUT1 :

set interfaces ethernet eth0 address 10.0.0.2/24
set protocols static route 0.0.0.0/0 next-hop 10.0.0.1
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 3: Set the following configuration in DUT2 :

set interfaces ethernet eth1 address 20.0.0.2/24
set protocols static route 0.0.0.0/0 next-hop 20.0.0.1
set service ssh
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Ping the IP address 10.0.0.2 from DUT0:

admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1
Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data.
64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.425 ms

--- 10.0.0.2 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.425/0.425/0.425/0.000 ms

Step 5: Ping the IP address 20.0.0.2 from DUT0:

admin@DUT0$ ping 20.0.0.2 count 1 size 56 timeout 1
Show output
PING 20.0.0.2 (20.0.0.2) 56(84) bytes of data.
64 bytes from 20.0.0.2: icmp_seq=1 ttl=64 time=0.412 ms

--- 20.0.0.2 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.412/0.412/0.412/0.000 ms

Step 6: Initiate an SSH connection from DUT1 to IP address 20.0.0.2 using user admin:

admin@DUT1$ ssh admin@20.0.0.2 option StrictHostKeyChecking=no option UserKnownHostsFile=/dev/null
Show output
Warning: Permanently added '20.0.0.2' (ECDSA) to the list of known hosts.
admin@20.0.0.2's password:
Welcome to Teldat OSDx v4.2.10.0

This system includes free software.
Contact Teldat for licenses information and source code.

Last login: Tue May 19 16:02:28 2026
admin@osdx$

Step 7: Run the command system conntrack show protocol tcp on DUT0 and check whether the output contains the following tokens:

OFFLOAD
Show output
tcp      6 src=10.0.0.2 dst=20.0.0.2 sport=52402 dport=22 packets=18 bytes=4605 src=20.0.0.2 dst=10.0.0.2 sport=22 dport=52402 packets=16 bytes=4349 [ASSURED] [OFFLOAD, packets=16 bytes=4493 packets=15 bytes=4289] mark=0 use=2
conntrack v1.4.7 (conntrack-tools): 1 flow entries have been shown.

Step 8: Run the command system conntrack show protocol tcp on DUT0 and check whether the output does not contain the following tokens:

OFFLOAD
Show output
tcp      6 3568 ESTABLISHED src=10.0.0.2 dst=20.0.0.2 sport=52402 dport=22 packets=18 bytes=4605 src=20.0.0.2 dst=10.0.0.2 sport=22 dport=52402 packets=16 bytes=4349 [ASSURED] mark=0 use=1
conntrack v1.4.7 (conntrack-tools): 1 flow entries have been shown.