Installing FWSM in Cisco VSS configuration

[csaravanan-sym]

Hi,

We recently purchased Cisco 720- 10 GE Supervisor and also the FWSM modules to go into our existing cisco 6509 core switches

We are planning to implement the supervisor in VSS mode

Can someone guide with me installing FWSM on a VSS switch mode

links to configuration guides or technical examples will be helpful

Thanks,

Chandru

[mirober2 · Accepted solution]

Hi Chandru,

There isn't any special configuration you need to do on the FWSM to support VSS for the switches. However, you do want to make sure that you run a supported code version on both the supervisors and the FWSMs. You'll find the minimum versions in the release notes:

FWSM 4.0:

http://www.cisco.com/en/US/docs/security/fwsm/fwsm40/release/notes/fwsmrn40.html#wp161314

FWSM 4.1:

http://www.cisco.com/en/US/docs/security/fwsm/fwsm41/release/notes/fwsmrn41.html#wp161314

Also, here is a link to the guide for configuring the switch for the FWSM. This will cover things like configuring the firewalled VLANs and setting up the switches to support FWSM failover:

http://www.cisco.com/en/US/docs/security/fwsm/fwsm40/configuration/guide/switch_f.html

Let us know if you have any questions about any of the configuration steps.

-Mike

[csaravanan-sym]

Hi Mike,

Thanks for quick reply and the docs. I browsed through the fwsm4.0 release notes and I do see the FWSMs supporting VSS

I also skimmed throught the FWSM config guide, I do not see a section for VSS

Once we make the switch to VSS mode, we will see both chassis as a single management switch right, so wondering if we have to do anything different on FWSM to accept it.

I do know the FWSM has nothing to do with the physical ports. It deals only with vlans on switches and the traffic flowing between vlans

As this is new, bit concened about configuring it

Thanks,

Chandru

[mirober2 · Accepted solution]

Hi Chandru,

There is no special configuration required on the FWSM when the switches use VSS. This is mentioned in the configuration guide:

http://www.cisco.com/en/US/docs/security/fwsm/fwsm40/configuration/guide/switch_f.html#wp1175751

Virtual Switching System (VSS) support—No FWSM configuration required.

Hope that helps.

-Mike

[csaravanan-sym]

OK. Thanks Mike