topic Re: FWSM - Sharing Interface Vlans in Network Security

FWSM - Sharing Interface Vlans

Oscar Cardiel — Mon, 11 Mar 2019 17:06:22 GMT

Hi guys,

I am trying to share two vlans in two different contexts but when I try to add the same vlan in the second context I receive this message: “Interface Vlan15 cannot be allocated to context. Interface is allocated to another context in a different failover group”. I have seen same example where you can share the same vlans; so I don’t know where is my fail.

http://www.cisco.com/en/US/docs/security/fwsm/fwsm31/configuration/guide/exampl_f.html#wp1029314

thanks.

Re: FWSM - Sharing Interface Vlans

Kureli Sankar — Mon, 08 Feb 2010 18:00:34 GMT

I believe you are using active/active failover.

If that is the case then the context that you are creating should also belong in the same failover group as you are trying to share a vlan between contexts that is in a diff. failover group.

Both contexts that share a vlan should belong in the same failover group. I believe that is the problem.

-KS

Re: FWSM - Sharing Interface Vlans

Oscar Cardiel — Mon, 08 Feb 2010 18:18:19 GMT

Thanks for your answer, Kusankar.

You are right; the contexts are in different failover group. Is it not possible to share the same interface vlan then?

Regards

Re: FWSM - Sharing Interface Vlans

Kureli Sankar — Mon, 08 Feb 2010 18:35:11 GMT

Correct.

Move both failover groups to one blade so, they both show active on one blade.

Now, move the context A(previous one) to a diff. failover group. Now, you can add the vlan to context B which will also be in the same failover group.

-KS

Re: FWSM - Sharing Interface Vlans

Oscar Cardiel — Mon, 08 Feb 2010 18:48:27 GMT

Yes it is, you are right again, fantastic!.

Thank you very much for your help, I really appreciate that.

Regards

Oscar