03-03-2008 04:30 AM - edited 03-09-2019 08:13 PM
HELLO,
LAN---FWSM---MSFC---ROUTER---INTERNET
arent we violating any security rule in this scenario if we put the msfc infront of the FWSM?
thanks
Solved! Go to Solution.
03-04-2008 01:25 AM
Hi
You can have as many vlans as you like behind the FWSM and as many vlan as you like on the MSFC.
The key thing in this is that any vlan that you want to firewall must not have an SVI (Layer 3 vlan interface) on the MSFC. So in your description above as long as the 7 vlans behind the FWSM are different from the 8 vlans that are on the MSFC you will be fine.
HTH
Jon
03-03-2008 06:13 AM
Looks ok to me. As long as the MSFC doesn't have ANY SVIs on the LAN.
/Fredrik
03-03-2008 09:47 PM
do you mean like this?
(inside,dmz, etc)-----FWSM---lan----MSFC---ROUTER---INTERNET
03-03-2008 09:59 PM
Actually there are multiple vlans on the msfc which are users vlans. correction below;
DMZs----FWSM---MSFC(8vlans)---router---inet
is it possible to modify this scenario to something like below
(DMZs,7VLANs)----FWSM---MSFC(8vlans)---router---inet
03-04-2008 01:25 AM
Hi
You can have as many vlans as you like behind the FWSM and as many vlan as you like on the MSFC.
The key thing in this is that any vlan that you want to firewall must not have an SVI (Layer 3 vlan interface) on the MSFC. So in your description above as long as the 7 vlans behind the FWSM are different from the 8 vlans that are on the MSFC you will be fine.
HTH
Jon
03-04-2008 04:40 AM
hi jon,
thanks a lot. any url you can paste here showing config on 2x6500 both having fwsm on it..
thanks
03-04-2008 04:56 AM
Hi
Have a look at this thread which should get you started.
Also see this basic FWSM config doc
And finally here are some examples from the configuration docs.
FWSM v2.x
http://www.cisco.com/en/US/docs/security/fwsm/fwsm22/configuration/guide/examples.html
FWSM v3.x
http://www.cisco.com/en/US/docs/security/fwsm/fwsm31/configuration/guide/exampl_f.html
HTH
Jon
03-04-2008 09:35 PM
hi jon,
again many thanks...another thing, can i do glbp on fwsm between 2 6500 chassis?
thanks
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: