UDP Connection Limit Cisco Pix using static command

Hi there,

I am trying to limit UDP connections initiated from a higher level sec int to a lower level sec int, aka my internal users to the internet.

I'm using static mapping as so: static (inside,outside) x.24.110.26 192.168.1.110 netmask

255.255.255.255 50 10

Thing is I can't seem to get the UDP connection limit emphasized. I do get the TCP limit working as it shows bellow but no luck for UDP. I'm aware UDP is connectionless but the cisco docs for the static command clearly says: "Specifies the maximum number of simultaneous TCP and UDP connections for the entire subnet"

Could anyone shed some light on this? Using a Cisco PIX Firewall 506 Unlimited License OS Version 6.3(5) I appreciate it.

Aless Gsurfnet

pix6# sh local-host 192.168.1.110 Interface inside: 345 active, 404 maximum active, 0 denied local host: , TCP connection count/limit = 50/50 TCP embryonic count = 2 TCP intercept watermark = 10 UDP connection count/limit = 342/unlimited AAA: Xlate(s): Global x.24.110.26 Local 192.168.1.110

Reply to
arplabs
Loading thread data ...

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.