Forum Discussion
NimbostratusAccess Policy Timeout irule
Good morning,
I wondering if there is a way to change the Access Policy Timeout value via an irule. I would like to change this value based on specific IP address.
I have the following irule to customize the inactivity value, but would like to do the same for "Access policy timeout"
when ACCESS_SESSION_STARTED { set citrixip [ACCESS::session data get session.user.clientip] set citrixtm [ACCESS::session data get session.inactivity_timeout] if { $citrixip equals "X.X.X.X"} { ACCESS::session data set session.inactivity_timeout 60 log local0. "timeout value is: $citrixtm" log local0. "citrix ip is: $citrixip" } }
3 Replies
Try this:
set newSID ACCESS::session data set session create -timeout 60 -lifetime 8600ACCESS::session create
In versions prior to v11.4, the timeout and lifetime values are indicated directly following the command. In v11.4+, the flags -timeout and -lifetime are supplied, and control the idle timeout and total session lifetime, respectively. Supplying them with a value of 0 (zero) disables that timeout check. The command will return the created SID.
Dario_GarridoNoctilucent
The solution proposed by R Eastman gives me a syntax error (I'm using 12.1.3 release).
error: ["invalid argument create"][ACCESS::session data set session create -timeout 60 -lifetime 8600]I have also tried with syntax like here with similar problems.
Any idea of how to modify lifetime & timeout values during access profile evaluation? Any example?
KR, Dario.
Hi,
You can change the variables in the VPE. The variables are:
session.max_session_timeout session.inactivity_timeoutCheers,
Kees
