Example 1: Admin Context Configuration - Cisco Catalyst 6500 Series Configuration Manual

Appendix B Sample Configurations
hostname Farscape
password passw0rd
enable password chr1cht0n
admin-context admin
context admin
context customerA
context customerB
context customerC
class gold
class silver
class bronze

Example 1: Admin Context Configuration

The host at 10.1.1.75 can access the context using SSH, which requires a certificate to be generated using
the ca generate rsa key modulus command and saved using the ca save all command. The certificate is
saved in Flash memory.
hostname Admin
domain isp
nameif vlan3 outside security0
nameif vlan4 inside security100
passwd secret1969
enable password h1andl0
ip address outside 209.165.201.2 255.255.255.224
ip address inside 10.1.1.1 255.255.255.0
route outside 0 0 209.165.201.1 1
ssh 10.1.1.75 255.255.255.255 inside
nat (inside) 1 10.1.1.0 255.255.255.0
global (outside) 1 209.165.201.10-209.165.201.29 [ This context uses dynamic NAT for inside
users that access the outside ]
OL-6392-01
allocate-interface vlan3
allocate-interface vlan4
config-url disk://admin.cfg
class default
description This is the context for customer A
allocate-interface vlan3
allocate-interface vlan5
config-url disk://contexta.cfg
class gold
description This is the context for customer B
allocate-interface vlan3
allocate-interface vlan6
config-url disk://contextb.cfg
class silver
description This is the context for customer C
allocate-interface vlan3
allocate-interface vlan7-vlan8
config-url disk://contextc.cfg
class bronze
limit-resource all 7%
limit-resource rate conns 2000
limit-resource conns 20000
limit-resource all 5%
limit-resource rate conns 1000
limit-resource conns 10000
limit-resource all 3%
limit-resource rate conns 500
limit-resource conns 5000
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide
Routed Mode Examples
B-3