Cisco 7604 Configuration Guide - Page 93

Chapter 4 Configuring Security Contexts Configuring a Security Context Step 4 • The numeric portion of the mapped name must include the same quantity of numbers as the vlanx-vlany statement. For example, both ranges include 100 interfaces: vlan100-vlan199 int1-int100 If you enter vlan100-vlan199 int1-int15 or vlan100-vlan199 happy1-sad5, for example, the command fails. If you set a mapped name, specify visible to see the VLAN ID in addition to the mapped name in the show interface command. The default invisible keyword specifies to only show the mapped name. The following example shows VLANs 100, 200, and 300 through 305 assigned to the context. The mapped names are int1 through int8. hostname(config-ctx)# allocate-interface vlan100 int1 hostname(config-ctx)# allocate-interface vlan200 int2 hostname(config-ctx)# allocate-interface vlan300-vlan305 int3-int8 To identify the URL from which the system downloads the context configuration, enter the following command: hostname(config-ctx)# config-url url When you add a context URL, the system immediately loads the context so that it is running, if the configuration is available. Note Enter the allocate-interface command(s) before you enter the config-url command. The FWSM must assign interfaces to the context before it loads the context configuration; the context configuration might include commands that refer to interfaces (interface, nat, global...). If you enter the config-url command first, the FWSM loads the context configuration immediately. If the context contains any commands that refer to interfaces, those commands fail. See the following URL syntax: • disk:/[path/]filename This URL indicates the internal flash memory. The filename does not require a file extension, although we recommend using ".cfg". If the configuration file is not available, you see the following message: WARNING: Could not fetch the URL disk:/url INFO: Creating context with default config You can then change to the context, configure it at the CLI, and enter the write memory command to write the file to flash memory. Note The admin context file must be stored on the internal flash memory. • ftp://[user[:password]@]server[:port]/[path/]filename[;type=xx] The type can be one of the following keywords: - ap-ASCII passive mode - an-ASCII normal mode - ip-(Default) Binary passive mode - in-Binary normal mode OL-20748-01 Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM 4-29