[c-nsp] ASA 5505 stops servicing inbound connections

Tillinger, Steve steve.tillinger at sourcemedia.com
Tue Aug 11 16:17:44 EDT 2009


OK so it's not the host count.  Maybe the number of connections?  I'm out of ideas.

# sh res usa
Resource              Current         Peak      Limit        Denied Context
SSH                         1            1          5             0 System
Conns                      15          129     280000             0 System
Hosts                      63           95        N/A             0 System



-----Original Message-----
From: Meenoo Shivdasani [mailto:meenoo at gmail.com] 
Sent: Tuesday, August 11, 2009 4:07 PM
To: Tillinger, Steve
Cc: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] ASA 5505 stops servicing inbound connections

On Tue, Aug 11, 2009 at 2:44 PM, Tillinger,
Steve<steve.tillinger at sourcemedia.com> wrote:
> Have you tried "sh local" ?   That should tell you if you're hitting the
> 10 user limit.


"Detected interface 'outside' as the Internet interface. Host limit
applies to all other interfaces.
Current host count: 2, towards licensed host limit of: 10

Interface dmz: 2 active, 2 maximum active, 0 denied"

The connections that get dropped are hitting the outside interface.
Also, the firewall is non-responsive to remote login via SSH or ASDM
when this happens.

M

"This communication is intended solely for the addressee and is confidential and not for third party unauthorized distribution"


More information about the cisco-nsp mailing list