PIX 6.3 after config change

jeanaguemon · ‎11-02-2007

I have a PIX 6.3, and everytime when i make access-list configuration change and hit enter, it takes a few seconds to a minute before return the cursor. What this could be? Thanks for your help

JORGE RODRIGUEZ · ‎11-02-2007

It could be anything but try to narrow down, have you try making the changes to PIX from a different machine to see if same behaviour?

What version of PIX code does your pix have? 6.3(?). Does this happens at the PIX command line or when in PDM? check your version code and bugs database based on your pix code. If you rule out is not the PC you're connecting from that is slow you may want to check PIX overall performance, bellow link.

Bug database

http://www.cisco.com/cgi-bin/Support/Bugtool/home.pl

general PIX troubleshooting performane issues

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a008009491c.shtml

Rate nay helpful posts

HTH

Jorge

Jorge Rodriguez

jaguemon · ‎11-05-2007

Thanks for replying. I appreciate it.

PIX version is 6.3(4)

This happens at the command line. PDM is disabled. The reason why I don't think about the PC is because I have another PIX behind this one which does not have this problem at all. I tried the connection on a different PC and still the same.

JORGE RODRIGUEZ · ‎11-05-2007

normally what is the PIX cpu load while making acl-changes? is this a pix515E in failover confiuration?

Jorge Rodriguez

jeanaguemon · ‎11-05-2007

This is PIX 525 in failover configuration. Below is the CPU usage:

CPU utilization for 5 seconds = 3%; 1 minute: 5%; 5 minutes: 4%

Thanks so much

JORGE RODRIGUEZ · ‎11-05-2007

This may or may not be your case, read arcticle (Maximun Config file size section )

http://www.cisco.com/en/US/docs/security/pix/pix61/release/notes/pixrn612.html#wp1242479

Jorge Rodriguez

jeanaguemon · ‎11-06-2007

My config size file is way below the 2MB. Actually it is 320KB. Thanks.

rolandshum · ‎11-06-2007

You don't mention the method you use to connect to the Pix. Have you tried it from a console connection?

jaguemon · ‎11-07-2007

SSH is the way I connect to the PIX. As I mentioned before, there are some other PIXes behind this one, and I do not have this kind of problem with them. Thanks.