FWSM in transparent mode

[wanglei]

i find in cisco site document about transparent mode .link as follow:

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/mod_icn/fwsm/fwsm_2_3/fwsm_cfg/fwmode.htm#wp1184961

it said:

The Firewall Services Module (FWSM) connects the same network on its inside and outside ports but uses different VLANs on the inside and outside

how can i config two different vlan belong to same network?

is there somebody give me a example.

thank you very much

[nkhawaja]

basically what they are talking about is having two layer 2 vlans but 1 layer 3 vlan.

so in terms of Layer3 both inside and outside have same subnet address,

but inside and outside on layer 2 are different, hence the concept of transparent firewall (transparent in the sense of layer 3)

[henrybb]

Hi,this is sample configuration.

6509A:

vlan 256

name FWoutside

int vlan 256

ip addr 98.1.1.252 255.255.255.0

6509B:

vlan 255

name FWinside

int vlan 255

ip addr 98.1.1.251 255.255.255.0

firewall module 3 vlan-group 16,32

firewall vlan-group 16 255

firewall vlan-group 32 256

FW:

firewall transparent

nameif vlan256 outside security0

nameif vlan255 inside security100

access-list ACL_IN extended permit ip any any

access-group ACL_IN in interface outside

access-group ACL_IN in interface inside

6509B:

6509B#ping 98.1.1.252

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 98.1.1.252, timeout is 2 seconds:

.!!!!

Success rate is 80 percent (4/5), round-trip min/avg/max = 1/1/1 ms

6509B#

[Panos Kampanakis]

What specifically would you want to clarify?

PK