FWSM add Vlan

anasmomo · ‎04-03-2008

dear sir,

i have a Cisco 6509 with FWSM configured using this group:

firewall vlan-group 1 104,105,109,111-114

now i want to creat a new VLAN in the switch (for example VLAN 200) and i want to add it to the mentioned group.

so i think i must add this command:

firewall vlan-group 1 104,105,109,111-114,200.

but i want to know if that disconnection will happen in this case, because the network is live?

thank u

Jon Marshall · ‎04-03-2008

You don't have to write out the whole thing again ie. you can just do

firewall vlan-group 1 200

and vlan 200 will be appended to the list.

No disconnection for Firewalled vlans. Obviously if vlan 200 has live servers on it and you allocate this vlan to the FWSM then there may be some disconnections to machines on vlan 200.

Jon