FWSM & IDSM2

[estelamathew]

Dear's,

Any different configuration for 6500 or IDSM-2 if i m placing with FWSM???? . I will place IDSM-2 in inline vlan pair mode,and all SVI will be created on FWSM instead of MSFC.

Any suggestion please on above design and configuration.

Thanks

[estelamathew]

Hello Scott,

you would need 2 virtual sensors like this:

host  A-----inline4200IPS----vlan1switch------inline4200IPS---host B

Really i did'nt understood the above diagram,

If suppose i dont have a IDSM-2 and i have a 4200 series  IPS still the traffic flow is same as such it was for IDSM-2.

Pairing:real SVI created for vlan 2 and 3 and dummy vlan 1 and 4

vlan 1 to 2

vlan 3 to 4

vlan 1                                                                                       vlan4

hostA--- 4200----int vlan2--------int vlan 3------4200----hostB

The above diagram is for 1 virtual sensor

Thanks

[Scott Nishimura]

Hi Estela,

yes, that is correct.. not much difference, except in your diagram, you would be also bridging vlan 2 to vlan 3 keeping it L2 the entire way.

regards,

scott

[estelamathew]

Hello Scott,

Vlan 2 and vlan 3 are already bridging by 1 and 4.   1 and 4 are dummy vlan only for bridging purpose.

i made a mistake is typing in above mail pairing option

Can u explain me the below lines

With the IDSM2, you wont really run into this much, with our external  42xx series IPS devices, you could and because the code is the same  base, you would need 2 virtual sensors like this:

host  A-----inline4200IPS----vlan1switch------inline4200IPS---host B

thanks

[Scott Nishimura]

Hi Estela,

yes, thats correct..  if vlan 2 and 3 were also bridged, then it would be L2 straight through from both end points.

As mentioned earlier, its not as prevalent nowadays.

regards,

scott

[estelamathew]

Thank u very much Scott for ur replies,

We will continue tomorrow as it is 2:00 midnight here,and also 1 task assigned in weekend.

Thanks see u tomorrow i will review the thread again and see it gets more clear or not,

Thanking once more for being with me.

[Scott Nishimura]

Hi Estela,

sounds good.  have a good evening.. i'll check back on monday to see if you have any follow up questions on it.

thanks,

scott