Cisco PIX 525 Spezifikationen PDF herunterladen (Seite 54)

3-10

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 3 Enabling Multiple Context Mode

Enabling or Disabling Multiple Context Mode

Logging into the Security Appliance in Multiple Context Mode

When you access the security appliance console, you access the system execution space. If you later

configure Telnet or SSH access to a context, you can log in to a specific context. If you log in to a specific

context, you can only access the configuration for that context. However, if you log in to the admin

context or the system execution space, you can access all contexts.

When you change to a context from admin, you continue to use the username and command

authorization settings set in the admin context.

The system execution space does not support any AAA commands, but you can configure its own enable

password, as well as usernames in the local database to provide individual logins.

Enabling or Disabling Multiple Context Mode

Your security appliance might already be configured for multiple security contexts depending on how

you ordered it from Cisco. If you are upgrading, however, you might need to convert from single mode

to multiple mode by following the procedures in this section. ASDM does not support changing modes,

so you need to change modes using the CLI.

This section includes the following topics:

• Backing Up the Single Mode Configuration, page 3-10

• Enabling Multiple Context Mode, page 3-10

• Restoring Single Context Mode, page 3-11

Backing Up the Single Mode Configuration

When you convert from single mode to multiple mode, the security appliance converts the running

configuration into two files. The original startup configuration is not saved, so if it differs from the

running configuration, you should back it up before proceeding.

Enabling Multiple Context Mode

The context mode (single or multiple) is not stored in the configuration file, even though it does endure

reboots. If you need to copy your configuration to another device, set the mode on the new device to

match using the mode command.

When you convert from single mode to multiple mode, the security appliance converts the running

configuration into two files: a new startup configuration that comprises the system configuration, and

admin.cfg that comprises the admin context (in the root directory of the internal Flash memory). The

original running configuration is saved as old_running.cfg (in the root directory of the internal Flash

memory). The original startup configuration is not saved. The security appliance automatically adds an

entry for the admin context to the system configuration with the name “admin.”

To enable multiple mode, enter the following command:

hostname(config)# mode multiple

You are prompted to reboot the security appliance.

1 2 ... 49 50 51 52 53 54 55 56 57 58 59 ... 603 604

Keine Kommentare

Cisco PIX 525 Spezifikationen Seite 54