ASA Error message

Unanswered Question
May 11th, 2010
User Badges:

Hi team

we have ASA firewall configured in failover mode.since last 4-5 days we are getting following error in the syslog

2010-05-11 20:02:26 Local4.Error May 11 2010 20:02:15: %ASA-3-210007: LU allocate xlate failed

i have checked the log message guide and as per the guide this is the sevarity 3 error message

Error Message %PIX|ASA-3-210007: LU allocate xlate failed

Explanation Stateful Failover failed to allocate a translation (xlate) slot record.

Recommended Action Check the available memory by using the show memory command to make sure that the security appliance has free memory in the system. If no memory is available, add more memory.

as per the system log we have 51% free memory but still the logs are continiously coming.

capture for show memory details are attached...

can you please suggest why i am getting this error when sufficient amount of free memory available..

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Jennifer Halim Sun, 05/16/2010 - 16:24
User Badges:
  • Cisco Employee,

what version is your ASA? it could be a software bug.

sameermunj Sun, 05/16/2010 - 21:58
User Badges:


version is 8.0

just to update this is known erroe  message and its observed error message guide for all version starting 7.0 to 8.3

my only worry is why the error is coming even when the the free memory is 51%

Jennifer Halim Sun, 05/16/2010 - 23:33
User Badges:
  • Cisco Employee,

Eventhough the syslog error messages suggest that it might be a memory issue, I would recommend that you open a TAC case to get the memory depletion issue checked/confirmed to see which particular process is causing the issue. Memory on ASA is preallocated per block, and some processes might be sharing the same block.

If you check "show failover" output, there might be few errors due to the error messages as the stateful failover is not able to allocated the xlate slot record.


This Discussion