Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

PIX 501 10 user license question


for the last week or so since we put in a pix 501 (6.3.4)with a 10 user license there has been at random times one PC (not always the same one) which cannot access the Internet on a LAN with 12 computers. The last time this happened I checked the PIX translations by doing a sh conn and it said 0 in use, 70 most used. There were 12 PC's in the ARP table, and I was able to restore access to for this PC by doing a clear xlate. Is this possibly a license issue, I know the conn table had 0 in use, but 1)how exactly does the PIX count this 10 user restriction?

2)Is there a specific syslog message that is generated when this count is exceeded?

3) I reduced the xlate timeout default to 30min and the conn timeout default to 20min, any other ideas on what could be happening?


Cisco Employee

Re: PIX 501 10 user license question


what were the number of xlat entries at that time.

you should issue "show xlat" not "show conn" for that.

yes there should be specific syslog generated



New Member

Re: PIX 501 10 user license question

Hi Nadeem,

I don't know what the count of xlate's was during the time of the PC not being able to access, but this is what the current table looks like:

xxx# sh xlate

10 in use, 105 most used

PAT Global xxx(2829) Local

PAT Global xxx(2831) Local

PAT Global xxx(2830) Local

PAT Global xxx(1633) Local

PAT Global xxx(2833) Local

PAT Global xxx(2832) Local

PAT Global xxx(1635) Local

PAT Global xxx(1634) Local

PAT Global xxx(2834) Local

PAT Global xxx(1636) Local

I didn't see anything in syslog, however I'm only doing buffer logging, I may have missed it.It shows 10 in use, from 3 IP's. how does the PIX see this license wise?

Thanks for your help


Cisco Employee

Re: PIX 501 10 user license question

the license is based on IP addresses and not based on the number of connections from a single IP or number of xlat entries.