Class Members; Configuring A Class - Cisco PIX 500 Series Configuration Manual

Configuring Resource Management
Figure 6-3
to classes with some limits set; other limits are inherited from the default class. Context B inherits no
limits from default because all limits are set in its class, the Gold class. Context D was not assigned to
a class, and is by default a member of the default class.
Figure 6-3
Context A

Class Members

To use the settings of a class, assign the context to the class when you define the context. All contexts
belong to the default class if they are not assigned to another class; you do not have to actively assign a
context to default. You can only assign a context to one resource class. The exception to this rule is that
limits that are undefined in the member class are inherited from the default class; so in effect, a context
could be a member of default plus another class.

Configuring a Class

To configure a class in the system configuration, perform the following steps. You can change the value
of a particular resource limit by reentering the command with a new value.
To specify the class name and enter the class configuration mode, enter the following command in the
Step 1
system execution space:
hostname(config)# class name
The name is a string up to 20 characters long. To set the limits for the default class, enter default for the
name.
To set the resource limits, see the following options:
Step 2
•
Cisco Security Appliance Command Line Configuration Guide
6-4
shows the relationship between the default class and other classes. Contexts A and C belong
Resource Classes
Default Class
Class
Bronze
(Some
Limits
Set)
Class Gold
(All Limits
Set)
Context B
To set all resource limits (shown in
hostname(config-resmgmt)# limit-resource all 0
Chapter 6
Context D
Class Silver
(Some Limits
Set)
Context C
Table 6-1) to be unlimited, enter the following command:
Adding and Managing Security Contexts
OL-12172-03