06-06-2003 07:18 AM - edited 03-09-2019 03:34 AM
Our sever Intermittently loses its internet connection. All I see in the syslog for the Pix 10000 is message "PIX-3-201002: Too many connections on xlate." Could this be a cause why connections are dropping? If so, how can I correct it?
06-06-2003 07:43 AM
This error is normally caused by having a limit set in place on the static maps.
Do a "show static" and look for the server's entry. The last two numbers represent the maximum amount of embryonic and actual connections a static map is allowed to have.
This is 0 by default, so it must have been configured with a limit on your PIX.
Regards,
-Joshua
06-06-2003 08:01 AM
But what if the server's entry is not listed in show static?
06-06-2003 09:23 AM
Sorry, in that case it's most like the last two numbers listed in the "show nat" command. If these are both set to 0, then there are no limits set.
The second last entry is a reference to the maximum number of TCP connections allowed and the last entry is a reference to the number of embryonic connections which are allowed.
for example:
pixfirewall# show nat
nat (inside) 1 192.168.1.0 255.255.255.0 50 30
This shows that 50 TCP connections are allowed at once and 30 embryonic connections are allowed.
Regards,
-Joshua
06-06-2003 05:44 PM
Hi,
please find the details f this error message....
1. %PIX-3-201002: Too many connections on static|xlate gaddr! econns nconns
This is a connection-related message. This message is logged when the maximum number of connections to the specified static address has been exceeded. The econns variable is the maximum number of embryonic connections and nconn s is the maximum number of connections permitted for the static or xlate.
Recommended Action: Use the show static command to check the limit imposed on connections to a static address. The limit is configurable.
we can configure the connection limit thro static command
Regards
kiruba
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide