The state entry should stay active as long as matching packets are flowing through the router. You can change the amount of time that an entry waits to time-out if no matching packets are seen (the ...