H3c-technologies H3C SecPath F5020 Manual de usuario descargar pdf (Pagina 71)

Configuring contexts

Overview

A physical firewall or an IRF fabric can be virtualized into multiple logical firewalls called contexts. Each

context is assigned separate hardware and software resources, and operates independently of other

contexts. From the user's perspective, a context is a standalone firewall.

Context applications

With context technology, you can meet firewall requirements from different branches or companies by

using a single physical firewall.

As shown in Figure 22, L

AN 1, LAN 2, and LAN 3 are connected to the Internet through the same firewall.

To provide secure access services for the three LANs, you can deploy a single physical firewall and

configure a context for each LAN on the firewall. The administrator of each LAN can only log in to and

manage its own context, without affecting other LANs. This has the same effect as deploying a separate

firewall for each LAN.

Figure 22 Network diagram

Default context and non-default contexts

A device supporting contexts is considered to be a context. This context is called the default context (for

example, Firewall in Figure 22)

. The default context always uses the name Admin and the ID 1. You

cannot delete it or change its name or ID.

When you log in to the physical firewall, you are logged in to the default context. On the default context,

you can perform the following tasks:

1 2 ... 66 67 68 69 70 71 72 73 74 75 76 ... 81 82

Sin comentarios

H3c-technologies H3C SecPath F5020 Manual de usuario Pagina 71