Default Class - Cisco PIX 500 Series Configuration Manual

Security appliance command line
Hide thumbs Also See for PIX 500 Series:
Table of Contents

Advertisement

Chapter 6
Adding and Managing Security Contexts
Figure 6-2
5%
4%
3%
2%
1%

Default Class

All contexts belong to the default class if they are not assigned to another class; you do not have to
actively assign a context to the default class.
If a context belongs to a class other than the default class, those class settings always override the default
class settings. However, if the other class has any settings that are not defined, then the member context
uses the default class for those limits. For example, if you create a class with a 2 percent limit for all
concurrent connections, but no other limits, then all other limits are inherited from the default class.
Conversely, if you create a class with a limit for all resources, the class uses no settings from the default
class.
By default, the default class provides unlimited access to resources for all contexts, except for the
following limits, which are by default set to the maximum allowed per context:
OL-12172-03
Unlimited Resources
A
B
C
Contexts Silver Class
Contexts Gold Class
Telnet sessions—5 sessions.
SSH sessions—5 sessions.
IPSec sessions—5 sessions.
MAC addresses—65,535 entries.
50% 43%
1
2
3
Cisco Security Appliance Command Line Configuration Guide
Configuring Resource Management
Maximum connections
allowed.
Connections in use.
Connections denied
because system limit
was reached.
6-3

Advertisement

Table of Contents
loading

This manual is also suitable for:

Asa 5500 series

Table of Contents