Cisco 5505 - ASA Firewall Edition Bundle, Руководство по настройке CLI

Страница: 227 / 2164

1-7
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Multiple Context Mode
Information About Security Contexts
Figure 1-4 shows a gateway context with two contexts behind the gateway.
Figure 1-4 Cascading Contexts
Management Access to Security Contexts
The ASA provides system administrator access in multiple context mode as well as access for individual
context administrators. The following sections describe logging in as a system administrator or as a
context administrator:
•
System Administrator Access, page 1-7
•
Context Administrator Access, page 1-8
System Administrator Access
You can access the ASA as a system administrator in two ways:
•
Access the ASA console.
From the console, you access the system execution space , which means that any commands you enter
affect only the system configuration or the running of the system (for run-time commands).
•
Access the admin context using Telnet, SSH, or ASDM.
See Chapter 1, “Configuring Management Access,” to enable Telnet, SSH, and ASDM access.
As the system administrator, you can access all contexts.
When you change to a context from admin or the system, your username changes to the default
“enable_15” username. If you configured command authorization in that context, you need to either
configure authorization privileges for the “enable_15” user, or you can log in as a different name for
which you provide sufficient privileges. To log in with a new username, enter the
login command. For
Admin
Context
Context A
Gateway
Context
GE 1/1.43
GE 0/0.2
Outside
GE 1/1.8
GE 0/0.1
(Shared Interface)
Internet
Inside Inside
Outside
Inside
Outside
153366