During the attempt to configure multiple switched virtual interfaces (SVIs), this produces a command-line interface (CLI) error message as shown in this example:
Forcing SVI 7 to stay shutdown (SVI 551 tied to line card in slot 1.)
For security reasons, by default, only one SVI can exist between the Multilayer Switch Feature Card (MSFC) and the Firewall Service Module (FWSM). For example, if you misconfigure the system with multiple SVIs, you can accidentally allow traffic to pass around the FWSM if you assign both the inside and outside VLANs to the MSFC.
Note: In order to prevent traffic from bypassing the firewall, policy-routing can be required when you enable support for multiple VLAN interfaces on the switch.
In order to enable support for multiple SVIs on your switch, use one of these commands.
Similarly, in CatOS, issue the set firewall multiple-vlan-interfaces enable command.
Also, while you configure your switch for the FWSM VLANs and receive an error message that indicatesthat you have more than one SVI, look at your switch and/or MSFC configuration in order to ensure that only one Layer 3 interface or VLAN interface exists as part of the firewall VLANs.
As the title says, I have a 2921 with one EHWIC-D8ESG and one EHWIC-4ESG (plus an EHWIC-1GE-SPF-CU, which likely does not affect the problem). Both Gigabit multi-port EHWICs are connected to VLAN 10, configured as NAT inside. G0/1, G0/2 and G/0/0/0 are al...
Hi,recently i saw this MSG. on the log file but i cant understand what is the cause route of it LC/0/0/CPU0:Feb 26 21:46:30.694 UTC: fib_mgr: %ROUTING-FIB-4-RETRYDB_NONEMPTY : One or more FIB object(s) have been in IPv4 retry queue for at ...
Hello guys,I want to ask you for help and advice regarding the QoS on private network (intranet). I have a modem form ISP connected ti my cisco router 2611xm that is connected to my switch 2950T and from there from port1(lan1 100mb/s)is connected a a...