cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
374
Views
0
Helpful
1
Replies

embryonic connection limit

bluesea2010
Level 7
Level 7

Hi,

Currently i have the below configuration


access-list Outside extended permit object-group Obj-HTTPS-HTTP any object Obj-192.168.10.5

policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
message-length maximum 512
id-randomization
id-mismatch action log
policy-map global_policy
class inspection_default
inspect ftp
inspect h323 h225
inspect h323 ras
inspect ip-options
inspect netbios
inspect rsh
inspect rtsp
inspect skinny
inspect esmtp
inspect sqlnet
inspect sunrpc
inspect tftp
inspect sip
inspect xdmcp
inspect dns
inspect icmp
inspect http
class class-default
user-statistics accounting
!
service-policy global_policy global

if i want to create embroynic connection limit for the object Obj-192.168.10.5, the above configuration will work ?


can i use both acl at same time ?
what will happen to the  class-default ?

access-list Outside mpf_acl object-group Obj-HTTPS-HTTP any object Obj-192.168.10.5

class-map mpf-policy
match access-list mpf-acl
service-policy mmpf-policy interface outside


Thanks

1 Reply 1

Aditya Ganjoo
Cisco Employee
Cisco Employee

Hi,

Since you are using interface-based MPF it will take preference than the default policy.

More info is on this link:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa72/configuration/guide/conf_gd/mpc.html

Regards,

Aditya

Please rate helpful posts.

Review Cisco Networking for a $25 gift card