Cisco ASA Resource Class Reassignment
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-14-2011 02:43 PM - edited 03-11-2019 01:21 PM
Hello
I'm wondering if anyone can advise me if I reassign a Cisco ASA context to a different class do I need to reload the firewall for the change to apply?
For example I define a gold class and apply it to my context.
hostname(config)# class gold
hostname(config-class)# limit-resource mac-addresses 10000
hostname(config-class)# limit-resource conns 15%
hostname(config-class)# limit-resource rate conns 1000
hostname(config-class)# limit-resource rate inspects 500
hostname(config-class)# limit-resource hosts 9000
hostname(config-class)# limit-resource asdm 5
hostname(config-class)# limit-resource ssh 5
hostname(config-class)# limit-resource rate syslogs 5000
hostname(config-class)# limit-resource telnet 5
hostname(config-class)# limit-resource xlates 36000
hostname(config-ctx)# context test
hostname(config-ctx)# allocate-interface gigabitethernet0/0.100 int1
hostname(config-ctx)# allocate-interface gigabitethernet0/0.102 int2
hostname(config-ctx)# allocate-interface gigabitethernet0/0.110-gigabitethernet0/0.115 int3-int8
hostname(config-ctx)# config-url ftp://user1:passw0rd@10.1.1.1/configlets/test.cfg
hostname(config-ctx)# member gold
I then realise the context doesn't need so much resource so create a new class called bronze and wish to reassign that context
hostname(config)# class bronze
hostname(config-class)# limit-resource Xlates 1000
hostname(config-class)# limit-resource ASDM 2
hostname(config-class)# limit-resource SSH 2
hostname(config-class)# limit-resource Telnet 2
hostname(config-class)# limit-resource Conns 10.0%
hostname(config-class)# limit-resource Hosts 1000
hostname(config-class)# limit-resource rate Syslogs 1000
hostname(config-class)# limit-resource rate Inspects 1000hostname(config-ctx)# context test
hostname(config-ctx)# member bronze
Do I need to reload the firewall for this change to be applied in version 8.4?
Thanks in advance
Martin
- Labels:
-
NGFW Firewalls

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-15-2011 05:18 AM
You don't need to reload.
Sent from Cisco Technical Support iPhone App
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-14-2020 03:53 PM
What about if I have to change a parameter inside a class... inspect rate from 500 value to 1000, Does it stop the contexts in that class? Or maybe interrupts something on those contexts member of the class?
Regards
