Cisco PIX 500 Series Configuration Manual page 107

Chapter 6 Adding and Managing Security Contexts
Step 4 To identify the URL from which the system downloads the context configuration, enter the following
command:
hostname(config-ctx)# config-url url
When you add a context URL, the system immediately loads the context so that it is running, if the
configuration is available.
Enter the allocate-interface command(s) before you enter the config-url command. The security
Note
appliance must assign interfaces to the context before it loads the context configuration; the context
configuration might include commands that refer to interfaces (interface, nat, global...). If you enter the
config-url command first, the security appliance loads the context configuration immediately. If the
context contains any commands that refer to interfaces, those commands fail.
See the following URL syntax:
disk:/[path/]filename
•
This URL indicates the internal Flash memory. The filename does not require a file extension,
although we recommend using ".cfg". If the configuration file is not available, you see the following
message:
WARNING: Could not fetch the URL disk:/ url
INFO: Creating context with default config
You can then change to the context, configure it at the CLI, and enter the write memory command
to write the file to Flash memory.
Note
ftp://[user[:password]@]server[:port]/[path/]filename[;type=xx]
•
The type can be one of the following keywords:
–
–
–
–
The server must be accessible from the admin context. The filename does not require a file
extension, although we recommend using ".cfg". If the configuration file is not available, you see
the following message:
WARNING: Could not fetch the URL ftp:// url
INFO: Creating context with default config
You can then change to the context, configure it at the CLI, and enter the write memory command
to write the file to the FTP server.
http[s]://[user[:password]@]server[:port]/[path/]filename
•
The server must be accessible from the admin context. The filename does not require a file
extension, although we recommend using ".cfg". If the configuration file is not available, you see
the following message:
WARNING: Could not fetch the URL http:// url
INFO: Creating context with default config
OL-12172-03
The admin context file must be stored on the internal Flash memory.
ap—ASCII passive mode
an—ASCII normal mode
ip—(Default) Binary passive mode
in—Binary normal mode
Cisco Security Appliance Command Line Configuration Guide
Configuring a Security Context
6-9