Configuring A Security Context - Cisco 7604 Configuration Manual

Chapter 4 Configuring Security Contexts
Table 4-2 Resource Names and Limits (continued)
Minimum and Maximum
Resource Name Number per Context
syslogs N/A
telnet 1 minimum
5 maximum concurrent
xlates N/A
For example, to set the default class limit for conns to 10 percent instead of unlimited, enter the
following commands:
hostname(config)# class default
hostname(config-class)# limit-resource conns 10%
All other resources remain at unlimited.
To add a class called gold with all resources set to 5 percent, except for fixups, with a setting of
10 percent, enter the following commands:
hostname(config)# class gold
hostname(config-class)# limit-resource all 5%
hostname(config-class)# limit-resource fixups 10%
To add a class called silver with all resources set to 3 percent, except for syslogs, with a setting of 500
per second, enter the following commands:
hostname(config)# class silver
hostname(config-class)# limit-resource all 3%
hostname(config-class)# limit-resource rate syslogs 500

Configuring a Security Context

The security context definition in the system configuration identifies the context name, configuration file
URL, interfaces that a context can use, and other context parameters.
To assign a context to a failover group for active/active failover, see the
Note
section on page
If you do not have an admin context (for example, if you clear the configuration) then you must first
specify the admin context name by entering the following command:
hostname(config)# admin-context name
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
Total Number for System
30,000 per second (rate)
100 concurrent
266,144 concurrent
14-26.
Configuring a Security Context
Description
System log messages.
The FWSM can support 30,000
Note
messages per second for messages sent
to the FWSM terminal or buffer. If you
send messages to a syslog server, the
FWSM supports 25,000 per second.
Telnet sessions.
Address translations.
"Using Active/Active Failover"
4-27