02-23-2011 02:42 PM - edited 03-11-2019 12:55 PM
Hi,
This is a wierd problem that I can't seem to find the answer for online. I just put together a 6506-e and now I'm trying to configure it like our current 6509. I tried to create a vlan on the switch and wanted to add it to the FWSM. I followed the documentation below,
but when I got to the nameif part of the documentation, the nameif command didn't exist. It's not a command I can find on the FWSM(config)#. When I do a '?' I get name and names but no nameif. Is there something else I need to configure either on the switch or FWSM? I see it on our current 6509 so I'm baffled as to why it doesn't show up on our 6506.
On the router# I created a vlan100 gave it an ip address of 10.94.80.9 255.255.255.0. I set the firewall vlan-group number to 1 and added 100 to firewall group 1. Then I sessioned into the FWSM# and went to 'config t' and couldn't add a nameif. I did a show vlan and it showed 100.
Any ideas why? I've never configured a 6500 from scratch so this is another first for me.
Router#sho module
Mod Ports Card Type Model Serial No.
--- ----- -------------------------------------- ------------------ -----------
1 6 Firewall Module WS-SVC-FWM-1 SAD140501MN
2 48 CEF720 48 port 10/100/1000mb Ethernet WS-X6748-GE-TX SAL1412DNY5
3 48 CEF720 48 port 10/100/1000mb Ethernet WS-X6748-GE-TX SAL1413E3GL
4 16 SFM-capable 16 port 1000mb GBIC WS-X6516A-GBIC SAL1427M8DW
5 2 Supervisor Engine 720 (Active) WS-SUP720-3B SAL13505X3W
Mod MAC addresses Hw Fw Sw Status
--- ---------------------------------- ------ ------------ ------------ -------
1 0011.9230.fd8a to 0011.9230.fd91 3.0 7.2(1) 4.0(7) Ok
2 68ef.bd73.a980 to 68ef.bd73.a9af 3.4 12.2(18r)S1 12.2(18)SXF1 Ok
3 68ef.bd34.d390 to 68ef.bd34.d3bf 3.4 12.2(18r)S1 12.2(18)SXF1 Ok
4 0019.aa98.69a0 to 0019.aa98.69af 4.5 7.2(1) 8.5(0.46)RFW Ok
5 0011.21b5.bfc4 to 0011.21b5.bfc7 4.3 8.5(2) 12.2(18)SXF1 Ok
Mod Sub-Module Model Serial Hw Status
---- --------------------------- ------------------ ----------- ------- -------
2 Centralized Forwarding Card WS-F6700-CFC SAL1413DVX3 4.1 Ok
3 Centralized Forwarding Card WS-F6700-CFC SAL1412DQKV 4.1 Ok
5 Policy Feature Card 3 WS-F6K-PFC3B SAL13499BVZ 2.0 Ok
5 MSFC3 Daughterboard WS-SUP720 SAL13499CHF 2.3 Ok
Mod Online Diag Status
---- -------------------
1 Pass
2 Pass
3 Pass
4 Pass
5 Pass
Router#
IOS (tm) s72033_rp Software (s72033_rp-IPSERVICES_WAN-M), Version 12.2(18)SXF13
Release Software (fc1)
ROM: System Bootstrap, Version 12.2(17r)S2, RELEASE SOFTWARE (fc1)
BOOTLDR: s72033_rp Doftware (s72033_rp-IPSERVICES_WAN-M), Version 12.2(18)SXF13,
RELEASE SOFTWARE (fc1)
I haven't upgraded the latest versions yet. I wanted to get it working first.
TIA Mike
Solved! Go to Solution.
02-23-2011 02:54 PM
Looks like you have an older version of FWSM OS earlier, and the command to configure nameif is directly from the configuration mode, ie:
nameif vlan100 inside security100
Currently you are running version 4.0.7, and here is the format to configure the interface nameif:
interface vlan100
nameif inside
security-level 100
ip address x.x.x.x
Here is the configuration guide for your reference:
http://www.cisco.com/en/US/docs/security/fwsm/fwsm40/configuration/guide/intfce_f.html
Hope that helps.
02-23-2011 02:54 PM
Looks like you have an older version of FWSM OS earlier, and the command to configure nameif is directly from the configuration mode, ie:
nameif vlan100 inside security100
Currently you are running version 4.0.7, and here is the format to configure the interface nameif:
interface vlan100
nameif inside
security-level 100
ip address x.x.x.x
Here is the configuration guide for your reference:
http://www.cisco.com/en/US/docs/security/fwsm/fwsm40/configuration/guide/intfce_f.html
Hope that helps.
02-24-2011 07:44 AM
Thanks Jennifer that's exacly what I needed. We still have an older version 6509 FWSM and it still uses the old nameif format. I didn't know there was a new way of doing it. Thanks again.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide