Pix connection limit settings don't take affect?

Dec 15, 2008 0 Replies

#Note that in the case where it isn't working, the global is not assigned to an interface it's simply another public block routing through the outside interface. Could that be it?



running 7.2(4)


static (dmz,outside) x.x.x.x 192.168.2.220 netmask 255.255.255.255 tcp



500 100 udp 500 #limits show up here # sh local-host 192.168.2.220 Interface failover: 1 active, 1 maximum active, 0 denied Interface dmz: 4 active, 5 maximum active, 0 denied local host: , TCP flow count/limit = 2/500 TCP embryonic count to host = 0 TCP intercept watermark = 100 UDP flow count/limit = 17/500

static (dmz,outside) x.x.x.x 192.168.2.210 netmask 255.255.255.255 tcp



500 250 udp 500 #limits don't show up here # sh local-host 192.168.2.210 Interface failover: 1 active, 1 maximum active, 0 denied Interface dmz: 4 active, 5 maximum active, 0 denied local host: , TCP flow count/limit = 27/unlimited TCP embryonic count to host = 0 TCP intercept watermark = unlimited UDP flow count/limit = 0/unlimited

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required