Cisco 7604 Configuration Guide - Page 87

Chapter 4 Configuring Security Contexts Configuring Resource Management B, and C are unable to reach their 3 percent combined limit. (See Figure 4-6.) Setting unlimited access is similar to oversubscribing the FWSM, except that you have less control over how much you oversubscribe the system. Figure 4-6 Unlimited Resources Total Number of Fixups per Second = 10,000 50% 43% 5% (100) 4% (100) 3% (100) 2% (100) 1% (100) A BC Contexts Silver Class 123 Contexts Gold Class Maximum connections allowed. Connections in use. Connections denied because system limit was reached. 104896 Default Class All contexts belong to the default class if they are not assigned to another class; you do not have to actively assign a context to the default class. If a context belongs to a class other than the default class, those class settings always override the default class settings. However, if the other class has any settings that are not defined, then the member context uses the default class for those limits. For example, if you create a class with a 2 percent limit for all concurrent connections, but no other limits, then all other limits are inherited from the default class. Conversely, if you create a class with a 2 percent limit for all resources, the class uses no settings from the default class. By default, the default class provides unlimited access to resources for all contexts, except for the following limits, which are by default set to the maximum allowed per context: • Telnet sessions-5 sessions. • SSH sessions-5 sessions. • IPSec sessions-5 sessions. • MAC addresses-65,535 entries. OL-20748-01 Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM 4-23