topic Re: no int vlan command in fwsm? in Network Security

no int vlan command in fwsm?

nguyenvinht — Mon, 11 Mar 2019 14:32:47 GMT

Hi,

I can't issue this command,

FWSM(config)# int vlan 100

Unknown interface vlan.

Any ideas why?

Thanks,

vnt

Re: no int vlan command in fwsm?

Jon Marshall — Mon, 05 Jan 2009 20:25:16 GMT

Vnt

Have you allocated this vlan (100) to the FWSM eg. something like this should be in your 6500 config

firewall vlan-group 1 100

firewall module vlan-group 1

If you have done this what context mode are you running in on the FWSM ie. single or multiple context ?

Jon

Re: no int vlan command in fwsm?

nguyenvinht — Mon, 05 Jan 2009 20:37:24 GMT

Yes. I did allocate the vlan.

I am running in single context.

I also just cleared the fwsm.

vnt

Re: no int vlan command in fwsm?

Jon Marshall — Mon, 05 Jan 2009 20:46:05 GMT

Has vlan 100 been created on the L2 switch ie.

sh vlan

Can you post the ouptut of

sh run

sh module

sh vlan

all from the 6500 switch

Jon

Re: no int vlan command in fwsm?

nguyenvinht — Mon, 05 Jan 2009 20:54:52 GMT

See attachment

Re: no int vlan command in fwsm?

Jon Marshall — Mon, 05 Jan 2009 21:24:04 GMT

Config looks fine. I had a similiar post a while back and it looks like it may be a IOS version issue -

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Security&topic=General&topicID=.ee6e1f8&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40%5E1%40%40.2cbfece8/8#selected_message

Jon

Re: no int vlan command in fwsm?

nguyenvinht — Mon, 05 Jan 2009 21:48:55 GMT

Thanks.

I can't create vlans on the fwsm.

How can I upgrade the fwsm code?

Any sugguestions?

Regards,

vnt

Re: no int vlan command in fwsm?

Jon Marshall — Mon, 05 Jan 2009 22:42:14 GMT

Vnt

You will need a Cisco account that allows OS downloads but as you are with IBM i'm assuming you have or can get that privilege -

http://www.cisco.com/cgi-bin/tablebuild.pl/cat6000-fwsm

The above is a link to the FWSM software. Note that if you upgrade to 3.x version then the config will change as 3.x is equivalent to 7.x Pix/ASA code whereas 2.x is equivalent to Pix 6.x code so you could downgrade if you wanted.

Jon