topic Hi Marius,Thanks for your in Network Security

ASA 8.4 Resource-limit Conns Vs. Show Resource Usage Value

Peter-John Gregorio — Tue, 12 Mar 2019 04:19:20 GMT

Hi experts,

In the Customer-Class configuration, we put “limit-resource Conns 50000”, thus each context should limit the maximum concurrent table under 50000. However, when we see the “sh resource usage”, the limit is showing “49000” not “50000” and we want to know why. We are using 5585-SSP-10 version 8.4(4)1. Your help is very much appreciated.

!
class default
limit-resource All 0
limit-resource ASDM 5
limit-resource SSH 5
limit-resource Telnet 5
!

class Customer-Class
limit-resource ASDM 5
limit-resource Conns 50000
!

# sh resource usage
Resource Current Peak Limit Denied Context
.........
Conns 198 2249 49000 0 sample1
Xlates 18 128 unlimited 0 sample1
Hosts 173 436 unlimited 0 sample1
.......
Syslogs [rate] 42 139345 unlimited 0 SHARED
Conns 669 2245 49000 0 SHARED
Xlates 11 648 unlimited 0 SHARED
Hosts 469 723 unlimited 0 SHARED
Conns [rate] 24 822 unlimited 0 SHARED
Inspects [rate] 8 885 unlimited 0 SHARED
Syslogs [rate] 296 7604 unlimited 0 sample2
Conns 8083 11458 49000 0 sample2
Xlates 9 436 unlimited 0 sample2
Hosts 1482 1955 unlimited 0 sample2
Conns [rate] 44 7303 unlimited 0 sample2
........

Have you assigned the context

Marius Gunnerud — Wed, 11 Jun 2014 14:14:47 GMT

Have you assigned the context you want to limit resources to the Customer-Class ?

What is the output of the following commands...and does the output indicate what you expect?

show resource allocation detail

show resource usage <context name>

Please remember to select a correct answer and rate helpful posts

Hi Marius,Thanks for your

Peter-John Gregorio — Thu, 12 Jun 2014 03:41:58 GMT

Hi Marius,

Thanks for your reply. The contexts I mentioned are members of Customer-Class. When we run show resource allocation details it shows:

......

Conns default all CA unlimited
Customer-Class 11 C 50000 550000 54.03%
All Contexts: 12 550000 54.03%

.......

So ok, we can see the 50000 there.

We were just wondering, is the 49000 we are getting from show resource usage normal/expected? Why? Or maybe a bug. We are actually expecting 50000 also.

Is the output you are show

Marius Gunnerud — Thu, 12 Jun 2014 09:04:45 GMT

Is the output you are show from the show resource usage from the relevant context?

show resource usage context Customer-Class

If it is then I would have to assume this is a bug. If not or you are not sure, then this might be the context from a different class or perhaps the default class.

Please remember to select a correct answer and rate helpful posts

Hi experts, Just to update in

Peter-John Gregorio — Thu, 26 Jun 2014 06:10:23 GMT

Hi experts,

Just to update in case any one of you encountered the same. It is a cosmetic issue. It has been issued defect id CSCup53581. So you can check it out. Unfortunately, no work around or permanent solution yet.

Thanks!