cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
967
Views
0
Helpful
2
Replies

FWSM 6500 nameif configuration problem

hustler0002
Level 1
Level 1

Hi,

This is a wierd problem that I can't seem to find the answer for online.  I just put together a 6506-e and now I'm trying to configure it like our current 6509.  I tried to create a vlan on the switch and wanted to add it to the FWSM.  I followed the documentation below,

http://www.cisco.com/en/US/products/hw/modules/ps2706/products_configuration_example09186a00808b4d9f.shtml

but when I got to the nameif part of the documentation, the nameif command didn't exist.  It's not a command I can find on the FWSM(config)#. When I do a '?' I get name and names but no nameif.  Is there something else I need to configure either on the switch or FWSM?   I see it on our current 6509 so I'm baffled as to why it doesn't show up on our 6506.

On the router# I created a vlan100 gave it an ip address of 10.94.80.9 255.255.255.0. I set the firewall vlan-group number to 1 and added 100 to firewall group 1.  Then I sessioned into the FWSM# and went to 'config t' and couldn't add a nameif.  I did a show vlan and it showed 100.

Any ideas why? I've never configured a 6500 from scratch so this is another first for me.

Router#sho module
Mod Ports Card Type                              Model              Serial No.
--- ----- -------------------------------------- ------------------ -----------
  1    6  Firewall Module                        WS-SVC-FWM-1       SAD140501MN
  2   48  CEF720 48 port 10/100/1000mb Ethernet  WS-X6748-GE-TX     SAL1412DNY5
  3   48  CEF720 48 port 10/100/1000mb Ethernet  WS-X6748-GE-TX     SAL1413E3GL
  4   16  SFM-capable 16 port 1000mb GBIC        WS-X6516A-GBIC     SAL1427M8DW
  5    2  Supervisor Engine 720 (Active)         WS-SUP720-3B       SAL13505X3W

Mod MAC addresses                       Hw    Fw           Sw           Status
--- ---------------------------------- ------ ------------ ------------ -------
  1  0011.9230.fd8a to 0011.9230.fd91   3.0   7.2(1)       4.0(7)       Ok
  2  68ef.bd73.a980 to 68ef.bd73.a9af   3.4   12.2(18r)S1  12.2(18)SXF1 Ok
  3  68ef.bd34.d390 to 68ef.bd34.d3bf   3.4   12.2(18r)S1  12.2(18)SXF1 Ok
  4  0019.aa98.69a0 to 0019.aa98.69af   4.5   7.2(1)       8.5(0.46)RFW Ok
  5  0011.21b5.bfc4 to 0011.21b5.bfc7   4.3   8.5(2)       12.2(18)SXF1 Ok

Mod  Sub-Module                  Model              Serial       Hw     Status
---- --------------------------- ------------------ ----------- ------- -------
  2  Centralized Forwarding Card WS-F6700-CFC       SAL1413DVX3  4.1    Ok
  3  Centralized Forwarding Card WS-F6700-CFC       SAL1412DQKV  4.1    Ok
  5  Policy Feature Card 3       WS-F6K-PFC3B       SAL13499BVZ  2.0    Ok
  5  MSFC3 Daughterboard         WS-SUP720          SAL13499CHF  2.3    Ok

Mod  Online Diag Status
---- -------------------
  1  Pass
  2  Pass
  3  Pass
  4  Pass
  5  Pass
Router#

IOS (tm) s72033_rp Software (s72033_rp-IPSERVICES_WAN-M), Version 12.2(18)SXF13
Release Software (fc1)
ROM: System Bootstrap, Version 12.2(17r)S2, RELEASE SOFTWARE (fc1)
BOOTLDR: s72033_rp Doftware (s72033_rp-IPSERVICES_WAN-M), Version 12.2(18)SXF13,
RELEASE SOFTWARE (fc1)

I haven't upgraded the latest versions yet.  I wanted to get it working first.

TIA Mike

1 Accepted Solution

Accepted Solutions

Jennifer Halim
Cisco Employee
Cisco Employee

Looks like you have an older version of FWSM OS earlier, and the command to configure nameif is directly from the configuration mode, ie:

nameif vlan100 inside security100

Currently you are running version 4.0.7, and here is the format to configure the interface nameif:

interface vlan100

     nameif inside

     security-level 100

     ip address x.x.x.x

Here is the configuration guide for your reference:
http://www.cisco.com/en/US/docs/security/fwsm/fwsm40/configuration/guide/intfce_f.html

Hope that helps.

View solution in original post

2 Replies 2

Jennifer Halim
Cisco Employee
Cisco Employee

Looks like you have an older version of FWSM OS earlier, and the command to configure nameif is directly from the configuration mode, ie:

nameif vlan100 inside security100

Currently you are running version 4.0.7, and here is the format to configure the interface nameif:

interface vlan100

     nameif inside

     security-level 100

     ip address x.x.x.x

Here is the configuration guide for your reference:
http://www.cisco.com/en/US/docs/security/fwsm/fwsm40/configuration/guide/intfce_f.html

Hope that helps.

Thanks Jennifer that's exacly what I needed.  We still have an older version 6509 FWSM and it still uses the old nameif format.  I didn't know there was a new way of doing it.  Thanks again.

Review Cisco Networking for a $25 gift card