ASA-3-210005-LU-allocate-connection-failed

[secureIT]

Hi Guys,

I'm getting LU allocation logs in my standby firewall contineously.

Researched on memory & release notes & bug tool kit.

Understood that this issue has come only on earlier versions of code and not on 9.2.x

Cisco Adaptive Security Appliance Software Version 9.2(2)4

Dec 26 2014 15:26:16: %ASA-3-210005: LU allocate connection failed

Free memory:        6891813008 bytes (80%)

Can some one help pls..

[Vibhor Amrodia]

Hi,

Do you see a large difference in the "show conn count" output between the two devices ?

I would recommend opening a TAC case to troubleshoot this issue if there is a large difference.

Thanks and Regards,

Vibhor Amrodia

[secureIT]

Hi Vibhor,

I shall compare the show conn count in both fws.

If the state table count in both are almost similar, what output/step I should take to fix this.

Can you check the below output - rcv & rerr count high.

# show failover
Stateful Failover Logical Update Statistics
        Link : STATE-Failover GigabitEthernet0/7 (up)
        Stateful Obj    xmit       xerr       rcv        rerr      
        General         564020     0          444328456  1098384   

Secondly, would you recommend separate interface for stateful failover, currently it is sharing the failover cable.

Would this solve the problem

failover lan interface STATE-Failover GigabitEthernet0/1 ---> Failover link for failover hello packets
failover key *****
failover link STATE-Failover GigabitEthernet0/1 ---> For stateful failover
failover interface ip STATE-Failover 1.1.1.1 255.255.255.0 standby 1.1.1.2

[Vibhor Amrodia]

Hi,

Yes , that might help but are you seeing any error on the physical interface itself that you are using for the failover ?

Also , i would say you should open TAC case for this as the version is quite new and it might be something interesting to find out.

Thanks and Regards,

Vibhor Amrodia

[secureIT]

Hi Vibhor,

primary
show conn count
2300 in use 12000 most used

secondary
show conn count
1800 in use, 7000 most used

It would be helpful, if you could assist me on this case, rather than opening a tac case.

Kindly help....

Or at least provide me some solution steps or best practices.