Classification Examples - Cisco 7604 Configuration Manual

Chapter 4 Configuring Security Contexts

Classification Examples

Figure 4-1
allowing overlapping IP addresses. The classifier assigns the packet to Context B because Context B
includes the address translation that matches the destination address.
Figure 4-1
Admin
Context
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
shows multiple contexts sharing an outside interface, while the inside interfaces are unique,
Packet Classification with a Shared Interface
Internet
Packet Destination:
209.165.201.3
VLAN 100 (Shared Interface)
Classifier
Context A
VLAN 200 VLAN 250
Admin Inside
Network Customer A
Host Host
10.1.1.13 10.1.1.13
Context B
Dest Addr Translation
209.165.201.3
VLAN 300
Inside
Customer B
Host
10.1.1.13
Security Context Overview
10.1.1.13
4-5