
4-29
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
Chapter 4 Configuring Security Contexts
Configuring a Security Context
•
The numeric portion of the mapped name must include the same quantity of numbers as the
vlan
x
-
vlan
y
statement. For example, both ranges include 100 interfaces:
vlan100-vlan199 int1-int100
If you enter
vlan100-vlan199 int1-int15
or
vlan100-vlan199 happy1-sad5
, for example, the
command fails.
If you set a mapped name, specify
visible
to see the VLAN ID in addition to the mapped name in the
show interface
command. The default
invisible
keyword specifies to only show the mapped name.
The following example shows VLANs 100, 200, and 300 through 305 assigned to the context. The
mapped names are int1 through int8.
hostname(config-ctx)#
allocate-interface vlan100 int1
hostname(config-ctx)#
allocate-interface vlan200 int2
hostname(config-ctx)#
allocate-interface vlan300-vlan305 int3-int8
Step 4
To identify the URL from which the system downloads the context configuration, enter the following
command:
hostname(config-ctx)#
config-url
url
When you add a context URL, the system immediately loads the context so that it is running, if the
configuration is available.
Note
Enter the
allocate-interface
command(s) before you enter the
config-url
command. The FWSM must
assign interfaces to the context before it loads the context configuration; the context configuration might
include commands that refer to interfaces (
interface
,
nat
,
global
...). If you enter the
config-url
command first, the FWSM loads the context configuration immediately. If the context contains any
commands that refer to interfaces, those commands fail.
See the following URL syntax:
•
disk:/
[
path
/
]
filename
This URL indicates the internal flash memory. The filename does not require a file extension,
although we recommend using “.cfg”. If the configuration file is not available, you see the following
message:
WARNING: Could not fetch the URL disk:/
url
INFO: Creating context with default config
You can then change to the context, configure it at the CLI, and enter the
write memory
command
to write the file to flash memory.
Note
The admin context file must be stored on the internal flash memory.
•
ftp://
[
user
[
:
password
]
@
]
server
[:
port
]
/
[
path
/
]
filename
[
;type=
xx
]
The
type
can be one of the following keywords:
–
ap
—ASCII passive mode
–
an
—ASCII normal mode
–
ip
—(Default) Binary passive mode
–
in
—Binary normal mode
Summary of Contents for 6500 - Catalyst Series 10 Gigabit EN Interface Module Expansion
Page 35: ...P A R T 1 Getting Started and General Information ...
Page 36: ......
Page 297: ...P A R T 2 Configuring the Security Policy ...
Page 298: ......
Page 521: ...P A R T 3 System Administration ...
Page 522: ......
Page 613: ...P A R T 4 Reference ...
Page 614: ......