虚拟防火墙

network

虚拟防火墙

pixfirewall(config)# mode multiple     #打开多context 模式
pixfirewall(config)# show mode
pixfirewall(config)# context STUCOMM
PIX525(config-ctx)# allocate-interface Ethernet1.1-Ethernet1.2    #为STUCOMM虚拟防火墙分配物理接口
PIX525(config-ctx)# context admin
PIX525(config-ctx)# allocate e0.1-e0.2
PIX525# changeto context admin           #进入admin context虚拟防火墙
PIX525/admin# changeto system            #进入System configurateion
PIX525/admin# changeto context STUCOMM   #进入STUCOMM context 虚拟防火墙
changeto context STUCOMM
PIX525/STUCOMM#

network

system config


PIX525# sh run
sh run
: Saved
:
PIX Version 7.2(1)
!
hostname PIX525
enable password 8Ry2YjIyt7RRXU24 encrypted
no mac-address auto
!
interface Ethernet0
shutdown
!
interface Ethernet0.1
vlan 1
!
interface Ethernet0.2
vlan 2
!
interface Ethernet1
shutdown
!
interface Ethernet1.1
vlan 11
!
interface Ethernet1.2
vlan 12
!            
class default
  limit-resource All 0
  limit-resource ASDM 5
  limit-resource SSH 5
  limit-resource Telnet 5
!

ftp mode passive
pager lines 24
no failover
no asdm history enable
arp timeout 14400
console timeout 0

admin-context admin
context admin
  allocate-interface Ethernet0.1-Ethernet0.2
  config-url flash:/admin.cfg
!

context STUCOMM
  allocate-interface Ethernet1.1-Ethernet1.2
  config-url flash:/stucomm.cfg
!

prompt hostname context
Cryptochecksum:3c4f1072b1ba2f23c382864f3174b888
: end         
PIX525#

PIX525#
PIX525# sh mode
sh mode
Security context mode: multiple
PIX525#
PIX525# sh context
sh context
Context Name      Class      Interfaces           URL
*admin            default    Ethernet0.1-2        flash:/admin.cfg
STUCOMM          default    Ethernet1.1-2        flash:/stucomm.cfg

Total active Security Contexts: 2
PIX525#

network

设备默认认支持两个context，如果需要更多，需要购买licence