10-19-2012 11:49 AM
Hello,
We are using cisco ASA Version 8.2(1) .
When users are trying to login to VPN it is not getting connected and in the syslog i see error "Memory Allocation Error" . What is the problem and how to resolve it ?
Result of the command: "show mem detail"
Free memory: 53494808 bytes (20%)
Used memory:
Allocated memory in use: 129776616 bytes (48%)
Reserved memory: 85164032 bytes (32%)
----------------------------- ----------------
Total memory: 268435456 bytes (100%)
Dynamic Shared Objects(DSO): 0 bytes
Least free memory: 53397656 bytes (20%)
Most used memory: 215037800 bytes (80%)
MEMPOOL_DMA POOL STATS:
Non-mmapped bytes allocated = 53248000
Number of free chunks = 84
Number of mmapped regions = 0
Mmapped bytes allocated = 0
Max memory footprint = 53248000
Keepcost = 17846056
Max contiguous free mem = 17846056
Allocated memory in use = 35353720
Free memory = 17894280
----- fragmented memory statistics -----
fragment size count total
(bytes) (bytes)
---------------- ---------- --------------
16 5 80
24 15 360
32 6 192
40 24 960
48 1 48**
48 14 672
56 1 56
72 1 72
128 1 128
160 1 160
192 1 192
224 1 224
512 2 1392
768 2 1608
1024 3 3432
2048 1 2992
3072 2 7400
4096 1 4144
16384 1 23728
17846056 1 17846056*
* - top most releasable chunk.
** - contiguous memory on top of heap.
----- allocated memory statistics -----
fragment size count total
(bytes) (bytes)
---------------- ---------- --------------
48 22 1056
56 1445 80920
64 192 12288
72 32 2304
80 21 1680
88 4 352
96 3 288
112 36 4032
120 11 1320
128 2 256
136 11 1496
144 12 1728
152 11 1672
160 1 160
168 8 1344
176 17 2992
184 8 1472
192 2 384
200 14 2800
208 1 208
232 1 232
240 14 3360
248 3 744
256 9 2304
384 3 1152
512 4 2048
768 3 2304
1024 82 83968
2048 1 2048
4096 10 40960
8192 12 98304
12288 1 12288
16384 5 81920
24576 2 49152
32768 4 131072
65536 10 655360
98304 1 98304
131072 1 131072
196608 7 1376256
262144 8 2097152
393216 1 393216
524288 11 5767168
786432 1 786432
1048576 8 8388608
1572864 1 1572864
2097152 1 2097152
4194304 1 4194304
MEMPOOL_GLOBAL_SHARED POOL STATS:
Non-mmapped bytes allocated = 130023424
Number of free chunks = 848
Number of mmapped regions = 0
Mmapped bytes allocated = 0
Max memory footprint = 130023424
Keepcost = 29480
Max contiguous free mem = 29480
Allocated memory in use = 129780880
Free memory = 242544
----- fragmented memory statistics -----
fragment size count total
(bytes) (bytes)
---------------- ---------- --------------
16 152 2432
24 164 3936
32 130 4160
40 87 3480
48 1 48**
48 43 2064
56 14 784
64 3 192
72 8 576
80 18 1440
88 3 264
96 1 96
104 10 1040
112 10 1120
120 12 1440
128 11 1408
136 6 816
144 14 2016
168 1 168
184 7 1288
192 10 1920
200 5 1000
216 1 216
224 7 1568
240 2 480
256 18 5920
384 47 20568
512 42 23872
768 11 9960
1536 1 1776
3072 1 4072
8192 1 9464
12288 2 29520
16384 4 73704
29480 1 29480*
* - top most releasable chunk.
** - contiguous memory on top of heap.
----- allocated memory statistics -----
fragment size count total
(bytes) (bytes)
---------------- ---------- --------------
48 950 45600
56 936 52416
64 962 61568
72 479 34488
80 1781 142480
88 460 40480
96 228 21888
104 2012 209248
112 255 28560
120 251 30120
128 418 53504
136 58 7888
144 117 16848
152 1313 199576
160 165 26400
168 281 47208
176 235 41360
184 645 118680
192 221 42432
200 180 36000
208 26 5408
216 52 11232
224 185 41440
232 29 6728
240 162 38880
248 95 23560
256 1442 369152
384 237 91008
512 941 481792
768 57 43776
1024 118 120832
1536 13 19968
2048 2195 4495360
3072 46 141312
4096 55 225280
6144 18 110592
8192 125 1024000
12288 33 405504
16384 49 802816
24576 32 786432
32768 36 1179648
49152 9 442368
65536 1024 67108864
98304 8 786432
131072 17 2228224
196608 12 2359296
262144 2 524288
393216 3 1179648
524288 8 4194304
786432 5 3932160
1048576 1 1048576
1572864 1 1572864
2097152 2 4194304
8388608 1 8388608
Summary for all pools:
Non-mmapped bytes allocated = 183271424
Number of free chunks = 932
Number of mmapped regions = 0
Mmapped bytes allocated = 0
Max memory footprint = 183271424
Keepcost = 17875536
Allocated memory in use = 165134600
Free memory = 18136824
=====================================
Result of the command: "show running-config"
: Saved
:
ASA Version 8.2(1)
!
Result of the command: "sh mem webvpn allobjects"
ERROR: Memory allocation failed
10-20-2012 06:18 PM
Can you pls share the output of "show version". Would like to see which model of ASA you are having as possibly you don't have enough memory for the version that you are running.
10-20-2012 07:21 PM
here is the memory requirement to run version 8.2 and above:
http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.html#wp37821
10-22-2012 09:38 AM
It was working fine for last 1 year recently we did move the Cisco adaptor due to Hardware migration to new setup after that we have been seeing this issue
Thanks
10-22-2012 09:35 AM
Result of the command: "show version"
Cisco Adaptive Security Appliance Software Version 8.2(1)
Device Manager Version 6.2(5)
Compiled on Tue 05-May-09 22:45 by builders
System image file is "disk0:/asa821-k8.bin"
Config file at boot was "startup-config"
vfssys up 2 days 21 hours
Hardware: ASA5510, 256 MB RAM, CPU Pentium 4 Celeron 1600 MHz
Internal ATA Compact Flash, 256MB
Slot 1: ATA Compact Flash, 512MB
BIOS Flash M50FW080 @ 0xffe00000, 1024KB
Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)
Boot microcode : CN1000-MC-BOOT-2.00
SSL/IKE microcode: CNLite-MC-SSLm-PLUS-2.03
IPSec microcode : CNlite-MC-IPSECm-MAIN-2.04
0: Ext: Ethernet0/0 : address is 0024.14d1.f384, irq 9
1: Ext: Ethernet0/1 : address is 0024.14d1.f385, irq 9
2: Ext: Ethernet0/2 : address is 0024.14d1.f386, irq 9
3: Ext: Ethernet0/3 : address is 0024.14d1.f387, irq 9
4: Ext: Management0/0 : address is 0024.14d1.f383, irq 11
5: Int: Internal-Data0/0 : address is 0000.0001.0002, irq 11
6: Int: Internal-Control0/0 : address is 0000.0001.0001, irq 5
Licensed features for this platform:
Maximum Physical Interfaces : Unlimited
Maximum VLANs : 100
Inside Hosts : Unlimited
Failover : Active/Active
VPN-DES : Enabled
VPN-3DES-AES : Enabled
Security Contexts : 2
GTP/GPRS : Disabled
SSL VPN Peers : 25
Total VPN Peers : 250
Shared License : Disabled
AnyConnect for Mobile : Disabled
AnyConnect for Linksys phone : Disabled
AnyConnect Essentials : Disabled
Advanced Endpoint Assessment : Disabled
UC Phone Proxy Sessions : 2
Total UC Proxy Sessions : 2
Botnet Traffic Filter : Disabled
This platform has an ASA 5510 Security Plus license.
10-22-2012 02:17 PM
Thanks, yes, it could be that there are more configurations, or more VPN tunnels being established, or more traffic going through the ASA, hence it started to fail.
It is definitely recommended to have 1 GIG of memory to run version 8.2 and above on ASA5510, otherwise, you will be seeing memory error as you have seen now.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide