PIX 501 License

[reinke]

For PIX 501, Cisco offers a Connection-based license: 10 or 100 users. What does this mean (e. g. for a 10 user license):

- a maximum of 10 xlates in the nat table?

- a maximum of 10 connections in the conn table?

If last one is true, one user might estabish 10 outbound connections (from one ip address). At this time, other users cannot establish any outboung connection?

Thanks

Edgar

[gfullage · Accepted solution]

A "user" is defined as follows:

- has sent or received traffic through the PIX in the last xlate timeout seconds (five minutes with the 501 default config).

- has a UDP or TCP connection

- has a NAT session

- has a user authentication session

It is certainly not the number of connections, but basically the number of unique internal IP addresses that have any number of connections through the PIX. The 501 will support up to around 26000 connections, but only 10 internal IP addresses could be using those.

You can do a "sho local-host" on the PIX to see all the current "users".