Cisco Catalyst 6500 Series User Manual

5-6
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide
OL-6392-01
Chapter 5 Managing Security Contexts
Security Context Overview
Sharing Resources
If you have a server that needs to be accessed by multiple contexts (such as a AAA server or a syslog
server), then you can choose to place the server on one context network to which all other contexts have
access, or you can place the server on a shared inside VLAN.
If you put the server on one context network, allow access to the server by authorized users. The benefit
of placing the shared resources on one context is that you only need to configure that one context for the
shared resources network. The downside is that you must allow outside access to the shared network for
the other contexts. Also, because traffic must go out of one context and then back in another, the FWSM
has a slightly greater load than if the traffic stays within a context. (See Figure 5-4.)
Figure 5-4 Shared Resources on One Context
Inside
Customer A
Admin
Network
Inside
Customer B
Inside
Customer C
Shared
Network
Admin
Context
Context A Context B
VLAN 203 VLAN 204VLAN 202
VLAN 300
Syslog Server AAA Server
VLAN 201
VLAN 200
Context C
Switch
Internet
104664

Cisco Catalyst 6500 Series Specifications

General

Brand	Cisco
Model	Catalyst 6500 Series
Category	Switch
Language	English