MPLS wtith FWSM multimode context how

Unanswered Question
Oct 1st, 2007

I have a 6500 with one FWSM module and this switch also act as a PE now I have configured multicontext in FWSM now some client are in MPLS-VPN how I will move MPLS traffic to FWSM L3 port .

Kindly suggst

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
swaroop.potdar Mon, 10/01/2007 - 06:49

Sanjoy, you can drop the vrf on the external vlan which connects to your internal vlans in the FWSM.

TO identify the external vlan, do "show vlan" and see which vlans are assigned to the FWSM and which of them, you have assigned to the customer as the outside interface on the FWSM.

When you have identified the vlan, in the supervisor mode you can assign the VRF on the interface vlan.



sanjoy2006 Mon, 10/01/2007 - 12:10

Hi Swaroop,

First of all am not running "firewall multiple-vlan-interfaces" so I can creat single L3 in my MSFC and a single L3 can only be a part of single vrf it may be either single vpn vrf or internet vrf ,how can I provide multiple vrf .

Can u explain am not clear about ur above explanation.

swaroop.potdar Mon, 10/01/2007 - 13:27

Now that was the disconnect, if you are running only a single L3 between the FWSM and the MSFC then you cannot assign more than one VRF.

Although you can assign different RT in that single VRF for different customer subnets inside the FWSM and have the RT's imported into the corresponding VPN;s at other end PE's. Only caveat is you will have to implement NAT somewhere to avoid IP overlaps.

Thats the only option which comes to mind first.



sanjoy2006 Tue, 10/02/2007 - 22:12

Hi Swaroop,

Can you send me a configurtion so that I can clear myself ,still now am confuse how can I make multiple VRF


This Discussion