Hello,
is it possible to tell a Pix515 (software 7.2(1)4 to limit the number of simultaneous connections to a given host? We have a computer that tends to crash when it gets overwhelmed by a huge number of connections. So it would be nice to have only 25 connections or so to this given host.
Regards, Christoph Gartmann
Sure can provided it's got a static. On the end of a static command you will normally see two zeros. The first is max connections, the second is the embrionic limit. Set them both to 25, do a clear xlate and you should be all set.
-Brian
Fine, thank you. Now there is the next question. I have a static statement like this: static(inside, outside) a.b.c.0 a.b.c.0 netmask 255.255.255.0 Then there is the new one: static(inside, outside) a.b.c.70 a.b.c.70 netmask 255.255.255.255 tcp 25 25 So I assume if I have to add the latter before the more general command? Or are the two statements somehow exlusive?
Regards, Christoph Gartmann
Not sure how that's going to act, you may need to get rid of the /24 nat statement and do 1 to 1 nats. The "tcp" statement on the second static shouldn't be there.
Have something to add? Share your thoughts — no account required.
Ask the community — no account required