https://community.cisco.com/t5/network-security/virtual-context-on-cat-6509e-fwsm-module/m-p/822547#M955250 <P>Hi all,</P><P></P><P>Can we use a single Virtual Context for filtering traffic from Multiple VLANs?. It should be any how possible b/c we are having a license of only 20 or 22 Virtual Contexts &amp; lots Customer VLANs.</P><P></P><P>I tried to make a 2nd SVI(int Vlan56) an Internal interface but its not working......... Do help me out so that this context(Companyxyz-Internal) fiters traffic for multiple VLANs.</P><P></P><P>FWSM Firewall Version 3.2(2)</P><P></P><P>CFWSM-FW# sh run</P><P></P><P>interface Vlan30</P><P> description CUSTOMER-1</P><P>!</P><P>interface Vlan50</P><P> description External</P><P></P><P>interface Vlan56</P><P> description CUSTOMER-2</P><P></P><P>admin-context Companyxyz-Internal</P><P>context Companyxyz-Internal</P><P> description admin-context Companyxyz-Internal</P><P> allocate-interface Vlan30</P><P> allocate-interface Vlan56</P><P> allocate-interface Vlan50</P><P> config-url disk:/Companyxyz-Internal</P><P> join-failover-group 1</P><P></P><P>CFWSM-FW# changeto context Companyxyz-Internal</P><P>CFWSM-FW/Companyxyz-Internal#sh run</P><P></P><P>interface Vlan30</P><P> nameif inside</P><P> security-level 100</P><P> ip address 172.16.33.1 255.255.255.0 standby 172.16.33.2</P><P>!</P><P>interface Vlan50</P><P> nameif outside</P><P> security-level 0</P><P> ip address 172.16.66.4 255.255.255.248 standby 172.16.66.5</P><P></P><P>interface Vlan56</P><P> no nameif</P><P> no security-level</P><P> no ip address</P><P></P><P>CFWSM-FW/Companyxyz-Internal(config)# int vlan 56</P><P>**** WARNING ****</P><P>Configuration Replication is NOT performed from Standby unit to Active unit.</P><P> Configurations are no longer synchronized.</P><P></P><P>CFWSM-FW/Companyxyz-Internal(config-if)# nameif inside</P><P>WARNING: VLAN *56* is not configured.</P><P>ERROR: Name "inside" has been assigned to interface Vlan51</P><P>CFWSM-FW/Companyxyz-Internal(config-if)#</P><P></P><P></P><P></P><P>Regards,</P><P></P><P>Akhtar</P><P></P> Mon, 11 Mar 2019 12:01:26 GMT nedian123 2019-03-11T12:01:26Z https://community.cisco.com/t5/network-security/virtual-context-on-cat-6509e-fwsm-module/m-p/822547#M955250 <P>Hi all,</P><P></P><P>Can we use a single Virtual Context for filtering traffic from Multiple VLANs?. It should be any how possible b/c we are having a license of only 20 or 22 Virtual Contexts &amp; lots Customer VLANs.</P><P></P><P>I tried to make a 2nd SVI(int Vlan56) an Internal interface but its not working......... Do help me out so that this context(Companyxyz-Internal) fiters traffic for multiple VLANs.</P><P></P><P>FWSM Firewall Version 3.2(2)</P><P></P><P>CFWSM-FW# sh run</P><P></P><P>interface Vlan30</P><P> description CUSTOMER-1</P><P>!</P><P>interface Vlan50</P><P> description External</P><P></P><P>interface Vlan56</P><P> description CUSTOMER-2</P><P></P><P>admin-context Companyxyz-Internal</P><P>context Companyxyz-Internal</P><P> description admin-context Companyxyz-Internal</P><P> allocate-interface Vlan30</P><P> allocate-interface Vlan56</P><P> allocate-interface Vlan50</P><P> config-url disk:/Companyxyz-Internal</P><P> join-failover-group 1</P><P></P><P>CFWSM-FW# changeto context Companyxyz-Internal</P><P>CFWSM-FW/Companyxyz-Internal#sh run</P><P></P><P>interface Vlan30</P><P> nameif inside</P><P> security-level 100</P><P> ip address 172.16.33.1 255.255.255.0 standby 172.16.33.2</P><P>!</P><P>interface Vlan50</P><P> nameif outside</P><P> security-level 0</P><P> ip address 172.16.66.4 255.255.255.248 standby 172.16.66.5</P><P></P><P>interface Vlan56</P><P> no nameif</P><P> no security-level</P><P> no ip address</P><P></P><P>CFWSM-FW/Companyxyz-Internal(config)# int vlan 56</P><P>**** WARNING ****</P><P>Configuration Replication is NOT performed from Standby unit to Active unit.</P><P> Configurations are no longer synchronized.</P><P></P><P>CFWSM-FW/Companyxyz-Internal(config-if)# nameif inside</P><P>WARNING: VLAN *56* is not configured.</P><P>ERROR: Name "inside" has been assigned to interface Vlan51</P><P>CFWSM-FW/Companyxyz-Internal(config-if)#</P><P></P><P></P><P></P><P>Regards,</P><P></P><P>Akhtar</P><P></P> Mon, 11 Mar 2019 12:01:26 GMT https://community.cisco.com/t5/network-security/virtual-context-on-cat-6509e-fwsm-module/m-p/822547#M955250 nedian123 2019-03-11T12:01:26Z https://community.cisco.com/t5/network-security/virtual-context-on-cat-6509e-fwsm-module/m-p/822548#M955251 <HTML><HEAD></HEAD><BODY><P>Couple things. </P><P>It looks like you are trying to add the new config to the standby unit which is causing the first error.. and 2nd ... Did you add vlan 56 to the firewall vlan-group statement on the supervisor?</P><P></P><P>should look something like</P><P></P><P>firewall vlan-group 1 30,50,56</P></BODY></HTML> Mon, 11 Feb 2008 21:12:47 GMT https://community.cisco.com/t5/network-security/virtual-context-on-cat-6509e-fwsm-module/m-p/822548#M955251 jim 2008-02-11T21:12:47Z https://community.cisco.com/t5/network-security/virtual-context-on-cat-6509e-fwsm-module/m-p/822549#M955252 <HTML><HEAD></HEAD><BODY><P>Vlans are already added to Firewall vlan-group......</P></BODY></HTML> Tue, 12 Feb 2008 04:20:09 GMT https://community.cisco.com/t5/network-security/virtual-context-on-cat-6509e-fwsm-module/m-p/822549#M955252 nedian123 2008-02-12T04:20:09Z