新聞財經娛樂♬資訊 News Economy

http://ccnpsecurity.blogspot.com/2011/10/connection-limits-through-cisco-asa.html

Reading the above article, I was trying to understand the Terminology used in Class Map, but can not get grasp of the following commands:

set connection embyronic-conn-max
set connection per-client-embryonic-max
set connection timeout embryonic
set connection timeout half-close
set connection timeout dcd retry_interval
[max_tries]

Any help ail be very much appreciated..

Thank you

TCP is a three way process (Syn, Ack, and SynAck) as soon as a client makes a connection through the firewall, it opens an 'embryonic connection' that waits for the second part of the conversation (the Ack), once the embryonic connection sees all the parts of the conversation, it becomes a connection.

You mean those command you posts above that don't react(not get grasp), right ?
Did you activate the policy map on one or more interfaces ?

Command:
service-policy policymap_name {global | interface interface_name}
for example:
service-policy CONNS interface outside

Take a look at this if need for similar CISCO device reference
http://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/conns_connlimits.html

Hope understand your question completely, if not, please point it out

Duncan