Global NAT pool for IP addresses identified by a global pool for the ingress interface. b.
3.
Configuring Security Context
To define a context mode, add, or change a context in the system configuration, perform the following steps:
Step 1. Define the context mode (single or multiple). Use the mode {single | multiple} command from
the global configuration. The appliance will require a reboot. Note that the mode configuration is
not stored in the configuration file.
Step 2. To add or modify a context in the system execution space or the admin context, use the context
{name} command from the global configuration mode to enter the context submode. The prompt
changes to the following to indicate it is still in the system execution space and is modifying
parameters for the specific context:
hostname(config-ctx)#
Step 3. Specify the interface(s) allocated to a context. Enter the command appropriate for a physical
interface or for one or more subinterfaces using the allocate-interface command from the context
submode. Repeat these commands multiple times to specify different ranges. Note that the
transparent firewall mode allows for only two interfaces to pass through traffic. Same interfaces can
be assigned to multiple contexts in routed mode, if desired.
Pages:
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270