Classification of traffic for multiple contexts on ASA

Unanswered Question
Oct 28th, 2009

Hi,

I need some clarification on the classification criteria on multiple contexts. As mentioned in the documents there are 3 different methods which are

1. Unique MAC

2. Unique Interfaces

3. NAT Config

In Unique Interfaces, as per the document

"If only one context is associated with the ingress interface, the security appliance classifies the packet

into that context"

In which case would i need to use this topology?

With regards to Unique MAC Address

In which scenario would multiple contexts share a single Interface. Does ACE allocate MAC addresses to contexts?

Thanks

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Amadou TOURE Thu, 10/29/2009 - 12:33

Hi,

"In which case would i need to use this topology?"

For instance, If you have enough interfaces in your security appliance and/or don't have multiple context in the same network segment, you can choose to allocate different interfaces to each context, so no interface is shared.

"With regards to Unique MAC Address"

If you have for instance just one interface to connect all context to Internet.

with the command "mac-address auto" the security appliance assign unique MAC to each shared context interface

Hope this helps

Amadou TOURE Thu, 10/29/2009 - 12:46

Hi,

"In which case would i need to use this topology?"

For instance, If you have enough interfaces in your security appliance and/or don't have multiple context in the same network segment, you can choose to allocate different interfaces to each context, so no interface is shared.

"With regards to Unique MAC Address"

If you have for instance just one interface to connect all context to Internet.

with the command "mac-address auto" the security appliance assign unique MAC to each shared context interface

Hope this helps

Actions

This Discussion