Cisco 7604 Configuration Manual page 645

Appendix B Sample Configurations
interface vlan 201
passwd secret1969
enable password h1andl0
monitor-interface inside
monitor-interface outside
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
global (outside) 1 209.165.201.10 netmask 255.255.255.224
! This context uses dynamic PAT for inside users that access the outside
route outside 0 0 209.165.201.5 1
telnet 10.0.3.75 255.255.255.255 inside
access-list INTERNET extended permit ip any any
access-group INTERNET in interface inside
! Allows all inside hosts to access the outside for any IP traffic
Context B Configuration (Primary Unit—Example 6)
To change to a context configuration, enter the changeto context name command. To change back to the
system, enter changeto system.
interface vlan 200
interface vlan 202
passwd secret1978
enable password 7samura1
monitor-interface inside
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
global (outside) 1 209.165.201.11 netmask 255.255.255.224
! This context uses dynamic PAT for inside users that access the outside
route outside 0 0 209.165.201.5 1
telnet 10.0.2.14 255.255.255.255 inside
access-list INTERNET extended permit ip any any
access-group INTERNET in interface inside
! Allows all inside hosts to access the outside for any IP traffic
Context C Configuration (Primary Unit—Example 6)
To change to a context configuration, enter the changeto context name command. To change back to the
system, enter changeto system.
interface vlan 200
interface vlan 203
passwd secret0997
enable password strayd0g
monitor-interface inside
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
global (outside) 1 209.165.201.12 netmask 255.255.255.224
! This context uses dynamic PAT for inside users that access the outside
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
nameif inside
security-level 100
ip address 10.0.3.1 255.255.255.0 standby 10.0.3.2
nameif outside
security-level 0
ip address 209.165.201.4 255.255.255.224 standby 209.165.201.8
nameif inside
security-level 100
ip address 10.0.2.1 255.255.255.0 standby 10.0.2.2
nameif outside
security-level 0
ip address 209.165.201.3 255.255.255.224 standby 209.165.201.7
nameif inside
security-level 100
ip address 10.0.1.1 255.255.255.0 standby 10.0.1.2
Failover Example Configurations
B-21