Cisco 7604 Configuration Guide - Page 630

Routed Mode Sample Configurations Appendix B Sample Configurations firewall vlan-group 1 3-8 interface vlan 3 ip address 209.165.201.1 255.255.255.224 no shutdown ... Example 2: Single Mode Firewall Using Same Security Level Example The following configuration creates three internal interfaces. Two of the interfaces connect to departments that are on the same security level. The DMZ interface hosts a syslog server. The management host on the outside needs access to the Syslog server and the FWSM. To connect to the FWSM, the host uses a VPN connection. FWSM uses RIP on the inside interfaces to learn routes. Because the FWSM does not advertise routes with RIP, the upstream router needs to use static routes for FWSM traffic (see Figure B-2). The Department networks are allowed to access the Internet and use PAT. Figure B-2 Example 2 Internet Management Host 209.165.200.225 Department 1 MSFC 209.165.201.1 outside VLAN 3 209.165.201.3 dept1 10.1.1.1 VLAN 5 dept2 10.1.2.1 DMZ 192.168.2.1 VLAN 10 Syslog Server 192.168.2.2 VLAN 4 Department 2 10.1.2.2 VLAN 9 192.168.1.1 Department 2 Network 2 132978 See the following sections for the configurations for this section: Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM B-6 OL-20748-01