Objectives
The simulator ticks each one as soon as the network meets it.
C1 has no NAT for its inside: add PAT to the outside interface.
C2 has no default route: add one to 100.64.2.254.
C3’s inside sub-interface was allocated to C2 by mistake: give Gi0/0.103 back to C3, and configure its inside again.
All three tenants reach 198.51.100.1.
Before you start
show context shows which context owns each interface. Removing an interface from a context clears its name and address there, so C3 needs its inside configured again.
Concept
Security contexts: many firewalls in one
In multiple context mode one firewall becomes several. The system execution space owns the hardware: it creates sub-interfaces and VLANs, creates contexts, and gives each context its interfaces. Each context then has its own interfaces, levels, routes, access rules and NAT, so tenants can use the same private addresses without ever meeting.
