Cisco 7604 Configuration Guide - Page 53

Chapter 2 Configuring the Switch for the Firewall Services Module Adding Switched Virtual Interfaces to the MSFC For transparent firewalls in multiple context mode, you need to use multiple SVIs because each context requires a unique VLAN on its outside interface (See Figure 2-3). You might also choose to use multiple SVIs in routed mode so you do not have to share a single VLAN for the outside interface. Figure 2-3 Multiple SVIs in Multiple Context Mode Internet VLAN 100 VLAN 151 VLAN 150 Admin Context Context A VLAN 152 VLAN 153 Context B Context C VLAN 201 VLAN 202 VLAN 203 VLAN 204 Admin Network Inside Customer A Inside Customer B Inside Customer C 92885 Configuring SVIs To add an SVI to the MSFC, perform the following steps: Step 1 Step 2 Step 3 Step 4 (Optional) To allow you to add more than one SVI to the FWSM, enter the following command: Router(config)# firewall multiple-vlan-interfaces To add a VLAN interface to the MSFC, enter the following command: Router(config)# interface vlan vlan_number To set the IP address for this interface on the MSFC, enter the following command: Router(config-if)# ip address address mask To enable the interface, enter the following command: Router(config-if)# no shutdown OL-20748-01 The following example shows a typical configuration with multiple SVIs: Router(config)# firewall vlan-group 50 55-57 Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM 2-7