Cisco Firewall Module [WS-SVC-FWM-1] & IPv6

Answered Question
Aug 14th, 2008

Good day!

I would like to seek advices regarding to Cisco Firewall Module [WS-SVC-FWM-1] and IPv6 network.

At this moment, our server farm is capable to support IPv4/IPv6 network, and our servers are starting to use both to serve our end-users.

My questions are:

1. Does Cisco Firewall Module [WS-SVC-FWM-1] supporting IPv6 network?

2. If not supported, is there any alternative to filter inbound/outbound IPv6 traffic to our server farm?

=============

# show version

FWSM Firewall Version 2.3(3)

FWSM Device Manager Version 4.1(3)

Compiled on Mon 10-Oct-05 14:50 by dalecki

MMU-FWSM up 1 year 179 days

Hardware: WS-SVC-FWM-1, 1024 MB RAM, CPU Pentium III 1000 MHz

Flash 04-29-05STI Flash 7.2.0 @ 0xc321, 20MB

0: gb-ethernet0: irq 5

1: gb-ethernet1: irq 7

2: ethernet0: irq 11

Licensed Features:

Failover: Enabled

VPN-DES: Enabled

VPN-3DES: Enabled

Maximum Interfaces: 256

Cut-through Proxy: Enabled

Guards: Enabled

URL-filtering: Enabled

Throughput: Unlimited

ISAKMP peers: Unlimited

Security Contexts: 2

This machine has an Unrestricted (UR) license.

Serial Number: XXXXXXXXXXX

Running Activation Key: 0x00000000 0x00000000 0x00000000 0x00000000

Configuration last modified by enable_15 at 14:28:51 Aug 13 2008

=================

I have this problem too.
0 votes
Correct Answer by Farrukh Haroon about 8 years 3 months ago

Here is a configuration guideline for FWSM 3.1, please go through the page for the various limitations:

http://www.cisco.com/en/US/docs/security/fwsm/fwsm31/configuration/guide/ipv6_f.html

It seems this support was introduced later than the code you are running.

http://www.cisco.com/en/US/docs/security/fwsm/fwsm31/release/notes/fwsmrn31.html#wp65269

(look at the "Core IP Enhancements" section)

Regards

Farrukh

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Farrukh Haroon Thu, 08/14/2008 - 11:48

Here is a configuration guideline for FWSM 3.1, please go through the page for the various limitations:

http://www.cisco.com/en/US/docs/security/fwsm/fwsm31/configuration/guide/ipv6_f.html

It seems this support was introduced later than the code you are running.

http://www.cisco.com/en/US/docs/security/fwsm/fwsm31/release/notes/fwsmrn31.html#wp65269

(look at the "Core IP Enhancements" section)

Regards

Farrukh

zamribesar Thu, 08/14/2008 - 11:50

Dear Mr Farrukh,

Thank you very much for the above info. I'm checking and reviewing it now.

-zamri-

Actions

This Discussion