Cisco 7604 Configuration Guide - Page 73

Chapter 4 Configuring Security Contexts Security Context Overview Figure 4-4 shows two servers on an inside shared interface. One server sends a packet to the translated address of a web server, and the FWSM classifies the packet to go through Context C because it includes a static translation for the address. The other server sends the packet to the real untranslated address, and the packet is dropped because the FWSM cannot classify it. Figure 4-4 Originating Traffic on a Shared Interface www.example.com 209.165.201.4 Internet HTTP Packet Dest. Address: 209.165.201.4 Admin Context Context A VLAN 100 Context B Context C Static Translation 10.1.2.27 209.165.201.4 FWSM FWSM VLAN 200 VLAN 200 FWSM FWSM Shared Network VLAN 200 VLAN 200 92899 HTTP Packet Dest. Address: 209.165.201.4 Syslog Server AAA Server HTTP Packet Dest. Address: 10.1.2.27 Management Access to Security Contexts The FWSM provides system administrator access in multiple context mode as well as access for individual context administrators. The following topics describe logging in as a system administrator or as a context administrator: • System Administrator Access, page 4-9 • Context Administrator Access, page 4-10 System Administrator Access You can access the FWSM as a system administrator in two ways: • Session to the FWSM from the switch. From the switch, you access the system execution space. OL-20748-01 Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM 4-9