6-18
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 6 Configuring Multiple Context Mode
Configuring Multiple Contexts
Prerequisites
• Perform this procedure in the system execution space.
• Configure physical interface parameters, VLAN subinterfaces, and redundant interfaces according
to the “Starting Interface Configuration (ASA 5510 and Higher)” section on page 8-9.
Detailed Steps
Step 1 If you are not already in the System configuration mode, in the Device List pane, double-click System
under the active device IP address.
Step 2 On the Context Management > Security Contexts pane, click Add.
The Add Context dialog box appears.
Step 3 In the Security Context field, enter the context name as a string up to 32 characters long.
This name is case sensitive, so you can have two contexts named “customerA” and “CustomerA,” for
example. “System” or “Null” (in upper or lower case letters) are reserved names, and cannot be used.
Step 4 In the Interface Allocation area, click the Add button to assign an interface to the context.
Step 5 From the Interfaces > Physical Interface drop-down list, choose an interface.
You can assign the main interface, in which case you leave the subinterface ID blank, or you can assign
a subinterface or a range of subinterfaces associated with this interface. In transparent firewall mode,
only interfaces that have not been allocated to other contexts are shown. If the main interface was already
assigned to another context, then you must choose a subinterface.
Step 6 (Optional) In the Interfaces > Subinterface Range (optional) drop-down list, choose a subinterface ID.
For a range of subinterface IDs, choose the ending ID in the second drop-down list, if available.
In transparent firewall mode, only subinterfaces that have not been allocated to other contexts are shown.
Step 7 (Optional) In the Aliased Names area, check Use Aliased Name in Context to set an aliased name for
this interface to be used in the context configuration instead of the interface ID.
a. In the Name field, sets the aliased name.
An aliased name must start with a letter, end with a letter, and have as interior characters only letters,
digits, or an underscore. This field lets you specify a name that ends with a letter or underscore; to
add an optional digit after the name, set the digit in the Range field.
b. (Optional) In the Range field, set the numeric suffix for the aliased name.
If you have a range of subinterfaces, you can enter a range of digits to be appended to the name.
Step 8 (Optional) To enable context users to see physical interface properties even if you set an aliased name,
check Show Hardware Properties in Context.
Step 9 Click OK to return to the Add Context dialog box.
Step 10 (Optional) If you use IPS virtual sensors, then assign a sensor to the context in the IPS Sensor Allocation
area.
For detailed information about IPS and virtual sensors, see Chapter 54, “Configuring the IPS
Application on the AIP SSM and SSC.”
Step 11 (Optional) To assign this context to a resource class, choose a class name from the Resource Assignment
> Resource Class drop-down list.
To Next Page
Loading...
Need help?
General
