There are three different types of context available in cisco ASA
1)
System Context
2)
Admin Context
3)
Normal Context
System
Context
à
It is also called as system execution space.
à
The System administrator adds and manages contexts by the configuration of each
context configuration location, allocated interfaces, and other context
operational parameters in the system configuration.
à
It is similar to hypervisor which is used for managing and creating virtual
machines (In this case virtual contexts).
à
The system configuration identifies basic settings for the security appliance.
You cannot assign any IP addresses when you are under the system context, with
exception to the management interface.
à
You can upgrade or downgrade the ASA software only in the System EXEC mode, not
in the other context modes.
Admin
Context
à
The admin context is like any other context, except that when a user logs in to
the admin context, that user will have system administrator rights, and can
access the system and all other contexts.
à
System Context is only used for managing hardware, it does not have firewalling
or network capability of its own.
à
Admin context is used for downloading updates or sending syslog messages. When
the system needs to access the network, it uses Admin context.
à
Admin context configuration must reside on the Flash memory.
à
If you convert from a Single mode to the Multiple Context mode, the admin
context is created automatically and the configuration file will be created on
the flash memory.
à
This context could be combined with any regular user context or be dedicated.
à
Admin context (when it is dedicated) is not counted in the context license. For
example, if you get the license for two contexts, you are allowed to have the
admin context and two other contexts.
Normal Context
à
It is also called as virtual context.
à
Contexts can be accessed via Console, Telnet, SSH, and ASDM.
à
If you log in to a non-admin context, you can only access the configuration for
that context.
0 comments:
Post a Comment