Cisco 7604 Configuration Guide - Page 48

Verifying the Module Installation Chapter 2 Configuring the Switch for the Firewall Services Module Some FWSM features interact with Cisco IOS features, and require specific Cisco IOS software versions. See the "Switch Hardware and Software Compatibility" section on page A-1 for more information. The following features involve Cisco IOS software, and are described in the feature sections: • Route Health Injection-See the "Configuring Route Health Injection" section on page 8-32. • PISA integration-See the "Permitting or Denying Application Types with PISA Integration" section on page 21-4. • Virtual Switching System (VSS) support-No FWSM configuration required. Note For Cisco IOS software Version 12.2(18)SX6 and earlier, for each FWSM in a switch, the SPAN reflector feature is enabled. This feature enables multicast traffic (and other traffic that requires central rewrite engine) to be switched when coming from the FWSM. The SPAN reflector feature uses one SPAN session. To disable this feature, enter the following command: Router(config)# no monitor session servicemodule Verifying the Module Installation To verify that the switch acknowledges the FWSM and has brought it online, view the module information using the following command: Router> show module [mod-num | all] The following is sample output from the show module command: Router> show module Mod Ports Card Type Model Serial No. 1 2 Catalyst 6000 supervisor 2 (Active) WS-X6K-SUP2-2GE SAD0444099Y 2 48 48 port 10/100 mb RJ-45 ethernet WS-X6248-RJ-45 SAD03475619 3 2 Intrusion Detection System WS-X6381-IDS SAD04250KV5 4 6 Firewall Module WS-SVC-FWM-1 SAD062302U4 Note The show module command shows six ports for the FWSM; these are internal ports that are grouped together as an EtherChannel. See the "Customizing the FWSM Internal Interface" section on page 2-8 for more information. Assigning VLANs to the Firewall Services Module This section describes how to assign VLANs to the FWSM. The FWSM does not include any external physical interfaces. Instead, it uses VLAN interfaces. Assigning VLANs to the FWSM is similar to assigning a VLAN to a switch port; the FWSM includes an internal interface to the Switch Fabric Module (if present) or the shared bus. Note See the switch documentation for information about adding VLANs to the switch and assigning them to switch ports. Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM 2-2 OL-20748-01