Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Source IP connection limits

I am running a Cisco ASA 5550 in active/standby mode.  We are currently running ASA OS v8.2(3)5.  I am wondering if there is a way I could limit source IP concurrent connections coming in my outside interface.  Does the ASA have a feature/ACL syntax that supports this?

Everyone's tags (4)
2 REPLIES
New Member

Source IP connection limits

Hello,

You can try this with a MFP, creating ACL to match the traffic, create a calss-map to match the ACL, then a polici map to set the class-map wit the feature conn-max, and placing the policy-map on the outside interface.

Here is a configuration example:

access-list  test permit ip host X.X.X.X host Y.Y.Y.Y

  class-map test

  match access-list test

  policy-map test

  class test

  set connection conn-max " <0-65535>  Enter the maximum number of simultaneous connections"

  service-policy test interface "outside

Let me know if this works for you.

New Member

Source IP connection limits

Hello

Was this helpfull for you?

Regards

361
Views
0
Helpful
2
Replies
CreatePlease to create content