305016: Unable to create connection
Cisco ASA is a security device that provides the combined capabilities of a firewall, an antivirus, and an intrusion prevention system. It also facilitates virtual private network (VPN) connections. It helps to detect threats and stop attacks before they spread through the network.
Message: %ASA-3-305016: Unable to create protocol connection from real_interface: real_host_ip /real_source_port to real_dest_interface: real_dest_ip / real_dest_port due to reason.
Event 305016 is generated when the maximum port blocks per host limit is reached for a host or the port blocks have been exhausted. The reason is specified in the message.
How could you resolve this situation?
If the reason is reaching the per-host PAT port block limit, review the maximum blocks per host limit by entering the 'xlate block-allocation maximum-per-host 4' command. If the reason is port block exhaustion in the PAT pool, increase the pool size. Also, review the block size by entering the 'xlate block-allocation size 512' command.