Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

FWSM - accessing secondary IP on MFSC

Hi,

I have the following scenario that I needed understanding on.

The outside interface of the FWSM is vlan 2

with ip address 10.2.2.2 255.255.255.0

On the the MFSC, vlan 2 is defined as follow with a secondary IP

interface vlan 2

ip address 10.2.2.2 255.255.255.0

ip address 10.6.6.6 255.255.255.0 secondary

Can you explain why on the FWSM 10.6.6.6 is not reachable?

TIA

PF

4 REPLIES
Silver

Re: FWSM - accessing secondary IP on MFSC

New Member

Re: FWSM - accessing secondary IP on MFSC

What I have gathered from your configuration example, it appears the FWSM is set up behind the MSFC. Since the outside interface on the FWSM is configured with an IP address of 10.2.2.2/24 then the SVI on the MSFC for the same vlan needs to have a different host address, such as 10.2.2.1/24 for example. There is no way for traffic to reach the MSFC from the FWSM if they both have the same host address. Are you running OSPF between the MSFC and the FWSM or are you using static routes?

Best regards,

-m2

Re: FWSM - accessing secondary IP on MFSC

from the FWSM do a show route | inc 10.6.6. and see whether there is a route for it . !! if there is , then you need to check any access-list applied to the Vlan2 interface of your PIX ..

I hope it helps ... please rate it if it does !!!

New Member

Re: FWSM - accessing secondary IP on MFSC

hi,

you should fo an extended ping using the 10.6.6.6 as source address. This would work.

Regards

170
Views
0
Helpful
4
Replies