topic Source IP connection limits in Network Security

Source IP connection limits

dan731028 — Mon, 11 Mar 2019 23:25:24 GMT

I am running a Cisco ASA 5550 in active/standby mode. We are currently running ASA OS v8.2(3)5. I am wondering if there is a way I could limit source IP concurrent connections coming in my outside interface. Does the ASA have a feature/ACL syntax that supports this?

Source IP connection limits

alejands — Mon, 02 Jul 2012 15:55:05 GMT

Hello,

You can try this with a MFP, creating ACL to match the traffic, create a calss-map to match the ACL, then a polici map to set the class-map wit the feature conn-max, and placing the policy-map on the outside interface.

Here is a configuration example:

access-list test permit ip host X.X.X.X host Y.Y.Y.Y

class-map test

match access-list test

policy-map test

class test

set connection conn-max " <0-65535> Enter the maximum number of simultaneous connections"

service-policy test interface "outside

Let me know if this works for you.

Source IP connection limits

alejands — Tue, 10 Jul 2012 16:33:41 GMT

Hello

Was this helpfull for you?

Regards