Cisco ASA Resource Class Reassignment

martin.foote — Mon, 11 Mar 2019 20:21:14 GMT

Hello

I'm wondering if anyone can advise me if I reassign a Cisco ASA context to a different class do I need to reload the firewall for the change to apply?

For example I define a gold class and apply it to my context.

hostname(config)# class gold

hostname(config-class)# limit-resource mac-addresses 10000

hostname(config-class)# limit-resource conns 15%

hostname(config-class)# limit-resource rate conns 1000

hostname(config-class)# limit-resource rate inspects 500

hostname(config-class)# limit-resource hosts 9000

hostname(config-class)# limit-resource asdm 5

hostname(config-class)# limit-resource ssh 5

hostname(config-class)# limit-resource rate syslogs 5000

hostname(config-class)# limit-resource telnet 5

hostname(config-class)# limit-resource xlates 36000

hostname(config-ctx)# context test
hostname(config-ctx)# allocate-interface gigabitethernet0/0.100 int1
hostname(config-ctx)# allocate-interface gigabitethernet0/0.102 int2
hostname(config-ctx)# allocate-interface gigabitethernet0/0.110-gigabitethernet0/0.115 int3-int8
hostname(config-ctx)# config-url ftp://user1:passw0rd@10.1.1.1/configlets/test.cfg
hostname(config-ctx)# member gold

I then realise the context doesn't need so much resource so create a new class called bronze and wish to reassign that context

hostname(config)# class bronze
hostname(config-class)# limit-resource Xlates 1000
hostname(config-class)# limit-resource ASDM 2
hostname(config-class)# limit-resource SSH 2
hostname(config-class)# limit-resource Telnet 2
hostname(config-class)# limit-resource Conns 10.0%
hostname(config-class)# limit-resource Hosts 1000
hostname(config-class)# limit-resource rate Syslogs 1000
hostname(config-class)# limit-resource rate Inspects 1000

hostname(config-ctx)# context test
hostname(config-ctx)# member bronze


Do I need to reload the firewall for this change to be applied in version 8.4?

Thanks in advance

Martin

Re: Cisco ASA Resource Class Reassignment

PAUL GILBERT ARIAS — Fri, 15 Apr 2011 12:18:20 GMT

You don't need to reload.

Sent from Cisco Technical Support iPhone App

Re: Cisco ASA Resource Class Reassignment

ecorreag — Mon, 14 Sep 2020 22:53:06 GMT

What about if I have to change a parameter inside a class... inspect rate from 500 value to 1000, Does it stop the contexts in that class? Or maybe interrupts something on those contexts member of the class?

Regards

topic Cisco ASA Resource Class Reassignment in Network Security

Cisco ASA Resource Class Reassignment

Re: Cisco ASA Resource Class Reassignment

Re: Cisco ASA Resource Class Reassignment