topic doubt with max classes limit in Network Security

doubt with max classes limit

Diego Maciel Gomes — Mon, 11 Mar 2019 23:47:03 GMT

Hello All,

I'm running my ASA with version 8.2.(2)12.

I need to put more classes in Service Policy Rules.

Well, I understant that my limit is full.... 63.

I need to know if new version of firmware, like 8.4(4)1 there is most classes than 63???

[OK] access-list global_mpc_65 line 1 extended permit tcp any host 172.19.4.109 eq 8530
[OK] class-map global-class-wsus
class-map global-class-wsus
[OK] match access-list global_mpc_65
[OK] policy-map global-policy
policy-map global-policy
[OK] description wsus
[ERROR] class global-class-wsus
Max limit of 63 classes in a policy reached

policy-map global-policy
class global-class-wsus
[ERROR] inspect icmp

inspect icmp
^
% Invalid input detected at '^' marker.

doubt with max classes limit

Julio Carvajal — Tue, 28 Aug 2012 18:58:09 GMT

Hello Diego,

Sorry to inform that the answer is now.

Output taken from the configuration guide 8.4.8.6

Policy Map Guidelines

See the following guidelines for using policy maps:

•You can only assign one policy map per interface. (However you can create up to 64 policy maps in the configuration.)

•You can apply the same policy map to multiple interfaces.

•You can identify up to 63 Layer 3/4 class maps in a Layer 3/4 policy map.

•For each class map, you can assign multiple actions from one or more feature types, if supported. See the "Incompatibility of Certain Feature Actions" section.

Regards,

Julio

doubt with max classes limit

Diego Maciel Gomes — Tue, 28 Aug 2012 19:25:34 GMT

Hello Julio,

It wasn't the answer I expected

Do you know if there is a road map for it? Or, what ASA model is possible to put more than 63??

Thanks

Diego

doubt with max classes limit

Julio Carvajal — Tue, 28 Aug 2012 19:56:42 GMT

Hello Diego,

It's not a model issue is just a OS behavior thing

I know, I know man, sorry to inform you that.. I mean the only way to use more policies will be to create one per interface then one global and redistribute on each on them 63 depending of the traffic requirements.

Hope this help,

Remember to rate all the helpful posts