IDSM2 and FWSM

Unanswered Question
Feb 12th, 2008
User Badges:

Hi


I have question regarding IDSM2 implementation in FWSM environment.


VLAN 60 is outside interface on FWSM

interface Vlan60

nameif outside

security-level 0

ip address 10.10.60.2 255.255.255.0


Also, on Cisco 6500, I have VLAN 60

interface Vlan60

ip address 10.10.60.1 255.255.255.0


Everything is OK, inside interface on FWSM is SVI 66, everything is UP and FWSM is wporking correctly.


Now, I want to put IDSM2 to monitor ALL traffic between FWSM outside interface and MSFC(6500).


Is it possible? And how?


I know that I need to put some additional VLAN to bridge through IDMS2, creating interface vlan pair (subinterface on data ports of IDSM2), but in thaht case, I am losing connection between FWSM and MSFC


Please help. Thank You



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
hoffa2000 Wed, 02/20/2008 - 01:54
User Badges:

One solution might also be to SPAN monitor the port channel serving the FWSM. In my case it's po 271. If you filter the SPAN session on only vlan 60 you should get the traffic flowing in and out of the FWSM outside interface towards the MSFC.

I've tried this a few times with a sniffer and it seems to work. Haven't tried it with the IDSM though


/Fredrik

jonix.niebla Mon, 06/02/2008 - 01:05
User Badges:

Hi,


Hope you have already solved your problem. have you tried changing the inline TCP tracking mode?

Actions

This Discussion