topic Re: FWSM bridge-group between two VRF interfaces in Network Security https://community.cisco.com/t5/network-security/fwsm-bridge-group-between-two-vrf-interfaces/m-p/1560746#M602300 <HTML><HEAD></HEAD><BODY><P>Yes, that can be done. The FWSM will only know about the SVIs and the MSFC is going to be responsible for VRF routing. So, it is do-able.</P><P></P><P></P><P>PK</P></BODY></HTML> Thu, 30 Sep 2010 13:11:36 GMT Panos Kampanakis 2010-09-30T13:11:36Z FWSM bridge-group between two VRF interfaces https://community.cisco.com/t5/network-security/fwsm-bridge-group-between-two-vrf-interfaces/m-p/1560743#M602297 <P><!--[if gte mso 10]> <style> /* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-parent:""; mso-padding-alt:0cm 5.4pt 0cm 5.4pt; mso-para-margin:0cm; mso-para-margin-bottom:.0001pt; mso-pagination:widow-orphan; font-size:10.0pt; font-family:"Times New Roman"; mso-ansi-language:#0400; mso-fareast-language:#0400; mso-bidi-language:#0400;} </style> <![endif]--></P><P class="MsoNormal"><SPAN lang="EN-GB">Hello,</SPAN></P><P></P><P class="MsoNormal"><SPAN lang="EN-GB"> </SPAN></P><P></P><P class="MsoNormal"><SPAN lang="EN-GB">I created two IP L3 interfaces (SVI’s) in a Cat6500 MSFC, each one in the same IP subnet, but in different VRF each.</SPAN></P><P></P><P class="MsoNormal"><SPAN lang="EN-GB"> </SPAN></P><P></P><P class="MsoNormal"><SPAN lang="EN-GB">Can I configure a FWSM bridge-group in transparent mode, so that the FWSM performs L2 inspection between these two MSFC SVI interfaces?</SPAN></P><P></P><P class="MsoNormal"><SPAN lang="EN-GB"> </SPAN></P><P></P><P class="MsoNormal"><SPAN lang="EN-GB">It is not clear to me in the sample configurations.</SPAN></P><P></P><P class="MsoNormal"><SPAN lang="EN-GB">Kind regards.</SPAN></P> Mon, 11 Mar 2019 18:47:17 GMT https://community.cisco.com/t5/network-security/fwsm-bridge-group-between-two-vrf-interfaces/m-p/1560743#M602297 albert_coll 2019-03-11T18:47:17Z Re: FWSM bridge-group between two VRF interfaces https://community.cisco.com/t5/network-security/fwsm-bridge-group-between-two-vrf-interfaces/m-p/1560744#M602298 <HTML><HEAD></HEAD><BODY><P>Unfortunately VRF lite is not supported with transparent FWSM.</P><P>I hope it helps.</P><P></P><P>PK</P></BODY></HTML> Wed, 29 Sep 2010 18:09:04 GMT https://community.cisco.com/t5/network-security/fwsm-bridge-group-between-two-vrf-interfaces/m-p/1560744#M602298 Panos Kampanakis 2010-09-29T18:09:04Z Re: FWSM bridge-group between two VRF interfaces https://community.cisco.com/t5/network-security/fwsm-bridge-group-between-two-vrf-interfaces/m-p/1560745#M602299 <HTML><HEAD></HEAD><BODY><P class="MsoNormal" style="margin: 0cm 0cm 0pt;"><SPAN style="color: #000000; font-family: arial,helvetica,sans-serif; mso-ansi-language: EN-GB;">Thank you for your answer.</SPAN></P><P class="MsoNormal"></P><P class="MsoNormal"></P><P class="MsoNormal" style="margin: 0cm 0cm 0pt;"><SPAN style="color: #000000; font-family: arial,helvetica,sans-serif; mso-ansi-language: EN-GB;">In such case, can i deploy the FWSM in routed mode between vlans with MSFC SVI interfaces assigned to different VRFs?</SPAN></P><P class="MsoNormal"></P><P class="MsoNormal"> <SPAN style="color: #000000; font-family: arial,helvetica,sans-serif; mso-ansi-language: EN-GB;">For instance, can i assign the FWSM outside interface to a vlan in which there is also an MSFC SVI assigned to the VRF A, and the FWSM inside interface to another vlan in which there is another MSFC SVI assigned to VRF B?&nbsp; Performing routing + inspection between them?</SPAN></P><P class="MsoNormal"></P><P class="MsoNormal"> <SPAN style="color: #000000; font-family: arial,helvetica,sans-serif; mso-ansi-language: EN-GB;">Kind regards.</SPAN></P></BODY></HTML> Thu, 30 Sep 2010 06:22:40 GMT https://community.cisco.com/t5/network-security/fwsm-bridge-group-between-two-vrf-interfaces/m-p/1560745#M602299 albert_coll 2010-09-30T06:22:40Z Re: FWSM bridge-group between two VRF interfaces https://community.cisco.com/t5/network-security/fwsm-bridge-group-between-two-vrf-interfaces/m-p/1560746#M602300 <HTML><HEAD></HEAD><BODY><P>Yes, that can be done. The FWSM will only know about the SVIs and the MSFC is going to be responsible for VRF routing. So, it is do-able.</P><P></P><P></P><P>PK</P></BODY></HTML> Thu, 30 Sep 2010 13:11:36 GMT https://community.cisco.com/t5/network-security/fwsm-bridge-group-between-two-vrf-interfaces/m-p/1560746#M602300 Panos Kampanakis 2010-09-30T13:11:36Z