Customer C Context Configuration (Example 5; Failover Example Configurations - Cisco 7604 Configuration Manual

Failover Example Configurations

interface bvi 1
route outside 0 0 10.1.3.2 1
access-list INTERNET remark -Allows all inside hosts to access the outside
access-list INTERNET extended permit ip any any
access-group INTERNET in interface inside
access-list RETURN remark -Allows OSPF back
access-list RETURN extended permit 89 any any
access-list RETURN remark -Allows DHCP back
access-list RETURN extended permit udp any any eq 68
access-group RETURN in interface outside

Customer C Context Configuration (Example 5)

To change to a context configuration, enter the changeto context name command. To change back to the
system, enter changeto system.
firewall transparent
passwd fl0wer
enable password treeh0u$e
interface vlan 153
interface vlan 7
interface bvi 100
route outside 0 0 10.1.4.2 1
access-list INTERNET remark -Allows all inside hosts to access the outside
access-list INTERNET extended permit ip any any
access-group INTERNET in interface inside
access-list RETURN remark -Allows OSPF back
access-list RETURN extended permit 89 any any
access-list RETURN remark -Allows DHCP back
access-list RETURN extended permit udp any any eq 68
access-group RETURN in interface outside
Failover Example Configurations
This section includes the following topics:
•
•
•
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
B-18
bridge-group 1
ip address 10.1.3.1 255.255.255.0
nameif outside
security-level 0
bridge-group 100
nameif inside
security-level 100
bridge-group 100
ip address 10.1.4.1 255.255.255.0
Example 6: Routed Mode Failover, page B-19
Example 7: Transparent Mode Failover, page B-22
Example 8: Active/Active Failover with Asymmetric Routing Support, page B-27
Appendix B Sample Configurations
OL-20748-01