Cisco 7604 Configuration Manual page 93

Chapter 4 Configuring Security Contexts
The numeric portion of the mapped name must include the same quantity of numbers as the
•
vlanx-vlany statement. For example, both ranges include 100 interfaces:
vlan100-vlan199 int1-int100
If you enter vlan100-vlan199 int1-int15 or vlan100-vlan199 happy1-sad5, for example, the
command fails.
If you set a mapped name, specify visible to see the VLAN ID in addition to the mapped name in the
show interface command. The default invisible keyword specifies to only show the mapped name.
The following example shows VLANs 100, 200, and 300 through 305 assigned to the context. The
mapped names are int1 through int8.
hostname(config-ctx)# allocate-interface vlan100 int1
hostname(config-ctx)# allocate-interface vlan200 int2
hostname(config-ctx)# allocate-interface vlan300-vlan305 int3-int8
To identify the URL from which the system downloads the context configuration, enter the following
Step 4
command:
hostname(config-ctx)# config-url url
When you add a context URL, the system immediately loads the context so that it is running, if the
configuration is available.
Enter the allocate-interface command(s) before you enter the config-url command. The FWSM must
Note
assign interfaces to the context before it loads the context configuration; the context configuration might
include commands that refer to interfaces (interface, nat, global...). If you enter the config-url
command first, the FWSM loads the context configuration immediately. If the context contains any
commands that refer to interfaces, those commands fail.
See the following URL syntax:
disk:/[path/]filename
•
This URL indicates the internal flash memory. The filename does not require a file extension,
although we recommend using ".cfg". If the configuration file is not available, you see the following
message:
WARNING: Could not fetch the URL disk:/url
INFO: Creating context with default config
You can then change to the context, configure it at the CLI, and enter the write memory command
to write the file to flash memory.
Note
ftp://[user[:password]@]server[:port]/[path/]filename[;type=xx]
•
The type can be one of the following keywords:
–
–
–
–
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
The admin context file must be stored on the internal flash memory.
ap—ASCII passive mode
an—ASCII normal mode
ip—(Default) Binary passive mode
in—Binary normal mode
Configuring a Security Context
4-29