no int vlan command in fwsm?

[nguyenvinht]

Hi,

I can't issue this command,

FWSM(config)# int vlan 100

Unknown interface vlan.

Any ideas why?

Thanks,

vnt

[Jon Marshall]

Vnt

Have you allocated this vlan (100) to the FWSM eg. something like this should be in your 6500 config

firewall vlan-group 1 100

firewall module vlan-group 1

If you have done this what context mode are you running in on the FWSM ie. single or multiple context ?

Jon

[nguyenvinht]

Yes. I did allocate the vlan.

I am running in single context.

I also just cleared the fwsm.

vnt

[Jon Marshall]

Has vlan 100 been created on the L2 switch ie.

sh vlan

Can you post the ouptut of

sh run

sh module

sh vlan

all from the 6500 switch

Jon

[nguyenvinht]

See attachment

[Jon Marshall]

Config looks fine. I had a similiar post a while back and it looks like it may be a IOS version issue -

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Security&topic=General&topicID=.ee6e1f8&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40%5E1%40%40.2cbfece8/8#selected_message

Jon

[nguyenvinht]

Thanks.

I can't create vlans on the fwsm.

How can I upgrade the fwsm code?

Any sugguestions?

Regards,

vnt

[Jon Marshall]

Vnt

You will need a Cisco account that allows OS downloads but as you are with IBM i'm assuming you have or can get that privilege -

http://www.cisco.com/cgi-bin/tablebuild.pl/cat6000-fwsm

The above is a link to the FWSM software. Note that if you upgrade to 3.x version then the config will change as 3.x is equivalent to 7.x Pix/ASA code whereas 2.x is equivalent to Pix 6.x code so you could downgrade if you wanted.

Jon