cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Bookmark
|
Subscribe
|
2528
Views
0
Helpful
2
Replies

Cisco ASA Resource Class Reassignment

martin.foote
Level 1
Level 1

Hello

I'm wondering if anyone can advise me if I reassign a Cisco ASA context to a different class do I need to reload the firewall for the change to apply?

For example I define a gold class and apply it to my context.

hostname(config)# class gold
hostname(config-class)# limit-resource mac-addresses 10000
hostname(config-class)# limit-resource conns 15%
hostname(config-class)# limit-resource rate conns 1000
hostname(config-class)# limit-resource rate inspects 500
hostname(config-class)# limit-resource hosts 9000
hostname(config-class)# limit-resource asdm 5
hostname(config-class)# limit-resource ssh 5
hostname(config-class)# limit-resource rate syslogs 5000
hostname(config-class)# limit-resource telnet 5
hostname(config-class)# limit-resource xlates 36000

hostname(config-ctx)# context test
hostname(config-ctx)# allocate-interface gigabitethernet0/0.100 int1
hostname(config-ctx)# allocate-interface gigabitethernet0/0.102 int2
hostname(config-ctx)# allocate-interface gigabitethernet0/0.110-gigabitethernet0/0.115 int3-int8
hostname(config-ctx)# config-url ftp://user1:passw0rd@10.1.1.1/configlets/test.cfg
hostname(config-ctx)#
member gold

I then realise the context doesn't need so much resource so create a new class called bronze and wish to reassign that context

hostname(config)# class bronze
hostname(config-class)# limit-resource Xlates 1000
hostname(config-class)# limit-resource ASDM 2
hostname(config-class)# limit-resource SSH 2
hostname(config-class)# limit-resource Telnet 2
hostname(config-class)# limit-resource Conns 10.0%
hostname(config-class)# limit-resource Hosts 1000
hostname(config-class)# limit-resource rate Syslogs 1000
hostname(config-class)# limit-resource rate Inspects 1000

hostname(config-ctx)# context test
hostname(config-ctx)#
member bronze

Do I need to reload the firewall for this change to be applied in version 8.4?

Thanks in advance

Martin

2 Replies 2

You don't need to reload.

Sent from Cisco Technical Support iPhone App

What about if I have to change a parameter inside a class... inspect rate from 500 value to 1000, Does it  stop the contexts in that class? Or maybe interrupts something on those contexts member of the class?

Regards

 

Review Cisco Networking for a $25 gift card