Configuring A Security Context - Cisco ASA 5505 Configuration Manual

Chapter 6 Configuring Multiple Context Mode
•
•
•
•
•
In the Rate Limited Resources area, set the rate limit for resources.
Step 5
If you do not set a limit, the limit is inherited from the default class. If the default class does not set a
limit, then it is unlimited by default.
You can set one or more of the following limits:
•
•
•
Click OK.
Step 6

Configuring a Security Context

The security context definition in the system configuration identifies the context name, configuration file
URL, and interfaces that a context can use.
OL-20339-01
ASDM Sessions—Sets the limit for concurrent ASDM sessions. Select the check box to enable this
limit. You can set the limit as a percentage by entering any integer greater than 1 and selecting
Percent from the list. You can assign more than 100 percent if you want to oversubscribe the device.
Or you can set the limit as an absolute value by entering an integer between 1 and 5 and selecting
Absolute from the list. The system has a maximum of 80 sessions divided between all contexts.
ASDM sessions use two HTTPS connections: one for monitoring that is always present, and one for
making configuration changes that is present only when you make changes. For example, the system
limit of 32 ASDM sessions represents a limit of 64 HTTPS sessions, divided between all contexts.
Connections—Sets the limit for concurrent TCP or UDP connections between any two hosts,
including connections between one host and multiple other hosts. Select the check box to enable this
limit. You can set the limit as a percentage by entering any integer greater than 1 and selecting
Percent from the list. You can assign more than 100 percent if you want to oversubscribe the device.
Or you can set the limit as an absolute value by entering an integer between 0 (system limit) and the
system limit for your model, and selecting Absolute from the list. See the Release Notes for
Cisco ASDM for the connection limit for your model.
Xlates—Sets the limit for address translations. Select the check box to enable this limit. If you set
the limit to 0, it is unlimited.
SSH—Sets the limit for SSH sessions. Select the check box to enable this limit. You can set the limit
as a percentage by entering any integer greater than 1 and selecting Percent from the list. You can
assign more than 100 percent if you want to oversubscribe the device. Or you can set the limit as an
absolute value by entering an integer between 1 and 5 and selecting Absolute from the list. The
system has a maximum of 100 sessions divided between all contexts.
MAC Entries—(Transparent mode only) Sets the limit for MAC address entries in the MAC address
table. Select the check box to enable this limit. You can set the limit as a percentage by entering any
integer greater than 1 and selecting Percent from the list. You can assign more than 100 percent if
you want to oversubscribe the device. Or you can set the limit as an absolute value by entering an
integer between 0 (system limit) and 65535 and selecting Absolute from the list.
Conns/sec—Sets the limit for connections per second. Select the check box to enable this limit. If
you set the limit to 0, it is unlimited.
Syslogs/sec—Sets the limit for system log messages per second. Select the check box to enable this
limit. If you set the limit to 0, it is unlimited.
Inspects/sec—Sets the limit for application inspections per second. Select the check box to enable
this limit. If you set the limit to 0, it is unlimited.
Cisco ASA 5500 Series Configuration Guide using ASDM
Configuring Multiple Contexts
6-17