Cisco PIX 525 Dokumentacja Pobierz pdf (Strona 62)

100

101

5-2

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 5 Adding and Managing Security Contexts

Configuring a Security Context

To add or change a context in the system configuration, perform the following steps:

Step 1 To add or modify a context, enter the following command in the system execution space:

hostname(config)# context

name

The name is a string up to 32 characters long. This name is case sensitive, so you can have two contexts

named “customerA” and “CustomerA,” for example. You can use letters, digits, or hyphens, but you

cannot start or end the name with a hyphen.

“System” or “Null” (in upper or lower case letters) are reserved names, and cannot be used.

Step 2 (Optional) To add a description for this context, enter the following command:

hostname(config-ctx)# description

text

Step 3 To specify the interfaces you can use in the context, enter the command appropriate for a physical

interface or for one or more subinterfaces.

• To allocate a physical interface, enter the following command:

hostname(config-ctx)# allocate-interface

physical_interface

[

map_name

]

[visible | invisible]

• To allocate one or more subinterfaces, enter the following command:

hostname(config-ctx)# allocate-interface

physical_interface

subinterface

physical_interface

subinterface

]

[

map_name

]] [visible | invisible]

You can enter these commands multiple times to specify different ranges.

Transparent firewall mode allows only two interfaces to pass through traffic.You can assign the same

interfaces to multiple contexts in routed mode, if desired. Transparent mode does not allow shared

interfaces.

The map_name is an alphanumeric alias for the interface that can be used within the context instead of

the interface ID. If you do not specify a mapped name, the interface ID is used within the context. For

security purposes, you might not want the context administrator to know which interfaces are being used

by the context.

A mapped name must start with a letter, end with a letter or digit, and have as interior characters only

letters, digits, or an underscore. For example, you can use the following names:

int0

inta

int_0

For subinterfaces, you can specify a range of mapped names.

1 2 ... 57 58 59 60 61 62 63 64 65 66 67 ... 603 604

Komentarze do niniejszej Instrukcji

Brak uwag

Cisco PIX 525 Dokumentacja Strona 62

Komentarze do niniejszej Instrukcji