Problem:
Scenario 1:
The "show np blocks" outputs measures the state of the three network
processors against three different threshold values. We increment the
appropriate threshold counter each of the 0/1/2 thresholds have been
crossed for the number of free blocks.
FWSM/pri/act# sho np blocks
MAX FREE THRESH_0 THRESH_1 THRESH_2
NP1 (ingress) 32768 32768 0 0 0
(egress) 521206 521206 0 0 0
NP2 (ingress) 32768 32768 0 0 0
(egress) 521206 521206 0 0 0
NP3 (ingress) 32768 32768 0 0 0
(egress) 521206 521206 0 0 0
If the threshold 2 count increases, packets will still be processed and
this is only a warning indicating that we are close to reaching the
maximum threshold.
If the threshold 1 count increases, then data packets will be dropped,
this includes packets flowing across the firewall and even those sent to
the firewall (IP packets).
If the threshold 0 count increases, then the control packets are
dropped, these control packets are internal packets that are passed
across multiple processors in the system - this is very serious.
For further information about the role of each network processor, please reference the following document:
https://supportforums.cisco.com/docs/DOC-12713
Scenario 2:
Problem:
User have a customer who is migrating from a FWSM setup to an ASA5585. They wish to know if Security Context licenses from the FWSM can transfer to the 5585.
Solution:
No, FWSM and ASA licenses can only be transferred between identical hardware units in the event of an RMA (Return Material Authorization).Migration from one platform to another requires new licenses.
Your partner or reseller can advise you as to the possibility of a Technology Migration Program (TMP). Those are sometimes available to give customers a financial incentive (additional discount) to move off of older unsupported platforms.
