https://community.cisco.com/t5/network-security/simple-firewall-question/m-p/1389220#M750182 <P class="MsoNormal" style="margin: 0in 0in 0pt;"><SPAN style="color: #000000; mso-ansi-language: EN-GB; font-family: Arial; "> hi! We've a fwsm module in our core sw and i'm new to this. just want to find out what's the purpose of the bridge-group 1 command on the inside and outside interfaces? + what's the BVI1 for? is it related to the brige-group 1 command on the inside n outside command? can i have different bridge-group number for inside and outside? thx</SPAN></P><P class="MsoNormal" style="margin: 0in 0in 0pt;"></P><P class="MsoNormal" style="margin: 0in 0in 0pt;"><STRONG style="mso-bidi-font-weight: normal; : ; color: #000000; mso-ansi-language: EN-GB; font-family: Arial; ">interface Vlan100</STRONG></P><P class="MsoNormal" style="margin: 0in 0in 0pt;"><STRONG style="mso-bidi-font-weight: normal; : ; color: #000000; mso-ansi-language: EN-GB; font-family: Arial; ">nameif outside</STRONG></P><P class="MsoNormal" style="margin: 0in 0in 0pt;"><STRONG style="mso-bidi-font-weight: normal; : ; color: #000000; mso-ansi-language: EN-GB; font-family: Arial; ">bridge-group 1</STRONG></P><P class="MsoNormal" style="margin: 0in 0in 0pt;"><STRONG style="mso-bidi-font-weight: normal; : ; color: #000000; mso-ansi-language: EN-GB; font-family: Arial; ">security-level 0</STRONG></P><P></P><P></P><P class="MsoNormal" style="margin: 0in 0in 0pt;"><SPAN style="color: #000000; mso-ansi-language: EN-GB; font-family: Arial; "> </SPAN></P><P class="MsoNormal" style="margin: 0in 0in 0pt;"><STRONG style="mso-bidi-font-weight: normal; : ; color: #000000; mso-ansi-language: EN-GB; font-family: Arial; ">interface BVI1</STRONG></P><P class="MsoNormal" style="margin: 0in 0in 0pt;"><STRONG style="mso-bidi-font-weight: normal; : ; color: #000000; mso-ansi-language: EN-GB; font-family: Arial; ">ip address 10.10.10.1 255.255.255.0</STRONG></P> Mon, 11 Mar 2019 17:03:51 GMT dkblee 2019-03-11T17:03:51Z https://community.cisco.com/t5/network-security/simple-firewall-question/m-p/1389220#M750182 <P class="MsoNormal" style="margin: 0in 0in 0pt;"><SPAN style="color: #000000; mso-ansi-language: EN-GB; font-family: Arial; "> hi! We've a fwsm module in our core sw and i'm new to this. just want to find out what's the purpose of the bridge-group 1 command on the inside and outside interfaces? + what's the BVI1 for? is it related to the brige-group 1 command on the inside n outside command? can i have different bridge-group number for inside and outside? thx</SPAN></P><P class="MsoNormal" style="margin: 0in 0in 0pt;"></P><P class="MsoNormal" style="margin: 0in 0in 0pt;"><STRONG style="mso-bidi-font-weight: normal; : ; color: #000000; mso-ansi-language: EN-GB; font-family: Arial; ">interface Vlan100</STRONG></P><P class="MsoNormal" style="margin: 0in 0in 0pt;"><STRONG style="mso-bidi-font-weight: normal; : ; color: #000000; mso-ansi-language: EN-GB; font-family: Arial; ">nameif outside</STRONG></P><P class="MsoNormal" style="margin: 0in 0in 0pt;"><STRONG style="mso-bidi-font-weight: normal; : ; color: #000000; mso-ansi-language: EN-GB; font-family: Arial; ">bridge-group 1</STRONG></P><P class="MsoNormal" style="margin: 0in 0in 0pt;"><STRONG style="mso-bidi-font-weight: normal; : ; color: #000000; mso-ansi-language: EN-GB; font-family: Arial; ">security-level 0</STRONG></P><P></P><P></P><P class="MsoNormal" style="margin: 0in 0in 0pt;"><SPAN style="color: #000000; mso-ansi-language: EN-GB; font-family: Arial; "> </SPAN></P><P class="MsoNormal" style="margin: 0in 0in 0pt;"><STRONG style="mso-bidi-font-weight: normal; : ; color: #000000; mso-ansi-language: EN-GB; font-family: Arial; ">interface BVI1</STRONG></P><P class="MsoNormal" style="margin: 0in 0in 0pt;"><STRONG style="mso-bidi-font-weight: normal; : ; color: #000000; mso-ansi-language: EN-GB; font-family: Arial; ">ip address 10.10.10.1 255.255.255.0</STRONG></P> Mon, 11 Mar 2019 17:03:51 GMT https://community.cisco.com/t5/network-security/simple-firewall-question/m-p/1389220#M750182 dkblee 2019-03-11T17:03:51Z https://community.cisco.com/t5/network-security/simple-firewall-question/m-p/1389221#M750194 <HTML><HEAD></HEAD><BODY><PRE __jive_macro_name="quote" class="jive_text_macro jive_macro_quote"><P><A class="jive-link-email-small" href="mailto:dkblee@hotmail.com">dkblee@hotmail.com</A></P><P></P><P class="MsoNormal" style="margin: 0in 0in 0pt;"><SPAN style="color: #000000; font-family: Arial;"> hi! We've a fwsm module in our core sw and i'm new to this. just want to find out what's the purpose of the bridge-group 1 command on the inside and outside interfaces? + what's the BVI1 for? is it related to the brige-group 1 command on the inside n outside command? can i have different bridge-group number for inside and outside? thx</SPAN></P><P class="MsoNormal"></P><P class="MsoNormal" style="margin: 0in 0in 0pt;"><STRONG style="color: #000000; font-family: Arial;">interface Vlan100</STRONG></P><P class="MsoNormal" style="margin: 0in 0in 0pt;"><STRONG style="color: #000000; font-family: Arial;">nameif outside</STRONG></P><P class="MsoNormal" style="margin: 0in 0in 0pt;"><STRONG style="color: #000000; font-family: Arial;">bridge-group 1</STRONG></P><P class="MsoNormal" style="margin: 0in 0in 0pt;"><STRONG style="color: #000000; font-family: Arial;">security-level 0</STRONG></P><P></P><P></P><P class="MsoNormal" style="margin: 0in 0in 0pt;"><SPAN style="color: #000000; font-family: Arial;"> </SPAN></P><P class="MsoNormal" style="margin: 0in 0in 0pt;"><STRONG style="color: #000000; font-family: Arial;">interface BVI1</STRONG></P><P class="MsoNormal" style="margin: 0in 0in 0pt;"><STRONG style="color: #000000; font-family: Arial;">ip address 10.10.10.1 255.255.255.0</STRONG></P></PRE><P></P><P>This configuration is for when you run the FWSM in transparent mode. With transparent mode the IP subnet is the same on the outside and the inside. You use 2 vlans, one for the outside and one for the inside but as i say they both use the same IP subnet.</P><P></P><P>You then join (ie. bridge) the 2 vlans together with the FWSM. So the bridge group needs to match so the FWSM knows which vlans to join together. The BVI is management IP for this transparent firewall.</P><P></P><P>Jon</P></BODY></HTML> Mon, 01 Feb 2010 17:31:03 GMT https://community.cisco.com/t5/network-security/simple-firewall-question/m-p/1389221#M750194 Jon Marshall 2010-02-01T17:31:03Z