Cisco ASA Host-Limit Issue

[makemorebeer]

Recently we setup a Cisco ASA device. today i've actually implimented the device and am Finding that it's got a 10 host limit on the license. is there a way to restrict access to the device so i'm not topping the 10 host limit and traffic continues to flow. The stats i'm seeing is inside interface blocked 582 connections, and outside interface blocked 21 connections. I've never worked with one of these devices so any informaiton would be much appreciated.

 

[brianinms]

How many inside hosts do you have?

 

[makemorebeer]

well there is no internet connection, and it seems that it's not registering a default route even though there is one. it's reading 36 blocked on one side, and like 600 blocked on the other now. all in all, we have a medium sized network, probably 6-700 nodes. however there are only three that need access to the ASA device. kind of a moot point now since we've returned the device to get one with unlimited host licenses but i'm still curiouse how you might prevent this from happening.

 

[Supergrrover]

You can take the default gateway off the other hosts except those three.

There is some trickery you can do with the MAC exemption (used for Cisco phones)but I don't think it was meant to be used that way and I am sure it isn't supported. (But it has worked via VPN.)


Brent
Systems Engineer / Consultant
CCNP, CCSP