Cisco 7604 Configuration Manual page 90

Configuring Resource Management
Table 4-2 Resource Names and Limits
Minimum and Maximum
Resource Name Number per Context
mac-addresses N/A
conns N/A
fixups N/A
hosts N/A
ipsec 1 minimum
5 maximum concurrent
asdm 1 minimum
5 maximum concurrent
ssh 1 minimum
5 maximum concurrent
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
4-26
Total Number for System
65,535 concurrent
999,900 concurrent
102,400 per second (rate)
10,000 per second (rate)
262,144 concurrent
10 concurrent
80 concurrent
100 concurrent
Chapter 4 Configuring Security Contexts
Description
For transparent firewall mode, the number of
MAC addresses allowed in the MAC address
table.
TCP or UDP connections between any two
hosts, including connections between one host
and multiple other hosts.
For concurrent connections, the FWSM
Note
allocates half of the limit to each of two
network processors that accept
connections. Typically, the connections
are divided evenly between the NPs.
However, in some circumstances, the
connections are not evenly divided, and
you might reach the maximum
connection limit on one NP before
reaching the maximum on the other. In
this case, the maximum connections
allowed is less than the limit you set.
The NP distribution is controlled by the
switch based on an algorithm. You can
adjust this algorithm on the switch, or
you can adjust the connection limit
upward to account for the inequity.
Application inspection.
Hosts that can connect through the FWSM.
IPSec sessions.
ASDM management sessions.
ASDM sessions use two HTTPS
Note
connections: one for monitoring that is
always present, and one for making
configuration changes that is present
only when you make changes. For
example, the system limit of 80 ASDM
sessions represents a limit of
160 HTTPS sessions.
SSH sessions.
OL-20748-01