Default Class - Cisco ASA 5505 Configuration Manual

Chapter 6 Configuring Multiple Context Mode
Figure 6-5
Max. 20%
(199,800)
(159,984)
(119,988)
(79,992)
(39,996)
If you assign an absolute value to a resource across all contexts that exceeds the practical limit of the
adaptive security appliance, then the performance of the adaptive security appliance might be impaired.
The adaptive security appliance lets you assign unlimited access to one or more resources in a class,
instead of a percentage or absolute number. When a resource is unlimited, contexts can use as much of
the resource as the system has available or that is practically available. For example, Context A, B, and
C are in the Silver Class, which limits each class member to 1 percent of the connections, for a total of
3 percent; but the three contexts are currently only using 2 percent combined. Gold Class has unlimited
access to connections. The contexts in the Gold Class can use more than the 97 percent of "unassigned"
connections; they can also use the 1 percent of connections not currently in use by Context A, B, and C,
even if that means that Context A, B, and C are unable to reach their 3 percent combined limit. (See
Figure
except that you have less control over how much you oversubscribe the system.
Figure 6-6
5%
4%
3%
2%
1%

Default Class

All contexts belong to the default class if they are not assigned to another class; you do not have to
actively assign a context to the default class.
OL-20339-01
Resource Oversubscription
Total Number of System Connections = 999,900
16%
12%
8%
4%
1 2 3 4
Contexts in Class
6-6.) Setting unlimited access is similar to oversubscribing the adaptive security appliance,
Unlimited Resources
50% 43%
A B C
Contexts Silver Class Contexts Gold Class
5 6 7 8 9
Maximum connections
allowed.
Connections in use.
Connections denied
because system limit
was reached.
1 2 3
Cisco ASA 5500 Series Configuration Guide using ASDM
Information About Security Contexts
Maximum connections
allowed.
Connections in use.
Connections denied
because system limit
was reached.
10
6-9