Re:Routed port concept

[ambivert skill]

Hi,

What is the concept of routed port?

Actually in my environment my 7613 router & 6513 Core switch is connected through 1 GPS link and all WAN traffic moves from my core router of 7600 series to my core switch 6500 series and then to Internet. Can we put the routed port into VLAN?

Thank you

[Adrian Coto]

The 65xx is a complex beast.

You can imagine it as a box with multiple L2 Switching instances ( represented by VLANs) and L3 Routing instances (Represented by VRFs)

By default each port is asociated to a L2 Switching instance: The VLAN 1. The port can be moved to another VLAN or to multiple VLANS, if trunking is used.

If you want to route traffic in and out of that VLAN, you must enable Routing on the VLAN interface (by configuring a L3 address ).

By default every enabled L3 interface is asociated to the master routing table. The interface can be moved to another L3 routing instance by configuring it in a VRF.

Now, we have ports associated to VLANs and then VLAN interfaces associated to VRFs.

---

The routed port concept was created to avoid the intermediate association to a VLAN in L3 environments.

Configuring "no switchport" in a given interface will disable L2 related functions ( like VLANs or STP) and allow the direct association of the interface to a L3 instance.

[Joseph W. Doherty]

Disclaimer

The  Author of this posting offers the information contained within this  posting without consideration and with the reader's understanding that  there's no implied or expressed suitability or fitness for any purpose.  Information provided is for informational purposes only and should not  be construed as rendering professional advice of any kind. Usage of this  posting's information is solely at reader's own risk.

Liability Disclaimer

In  no event shall Author be liable for any damages whatsoever (including,  without limitation, damages for loss of use, data or profit) arising out  of the use or inability to use the posting's information even if Author  has been advised of the possibility of such damage.

Posting

What is the concept of routed port?

It behaves like a router's port, e.g. like a "typical" ISR port, not like a switch port.

Can we put the routed port into VLAN?

No.  To participate in a VLAN, the port needs to be a switchport.

NB: Actually on L3 switches like the 6500/7600, I believe routed ports are internally mapped to "hidden" and dedicated individual VLAN with all the switchport features disabled.

[ambivert skill]

Thanks Adrian/Joseph

For your reply and for your valuable feedback ,actually I need to clear this concept for the implementation of FWSM (In Transparent mode) in our environment , we have to deploy FWSM in between 7613 router and 6513 switch like this 7613(Gi0/1)-->6513(Gi0/2)-->Internet which are presently connected through 1 GBPs link , these two ports are in routed mode and to deploy FWSM in between we need to connect the inside interface of FWSM to 7613 (Gi0/1) by putting them in same VLAN for. e.g VLAN 10 but in routed mode VLAN concept is not applied.

So please let me know what will be the solution for this issue.

Regards

Ambivert Skill

[Joseph W. Doherty]

Disclaimer

The  Author of this posting offers the information contained within this  posting without consideration and with the reader's understanding that  there's no implied or expressed suitability or fitness for any purpose.  Information provided is for informational purposes only and should not  be construed as rendering professional advice of any kind. Usage of this  posting's information is solely at reader's own risk.

Liability Disclaimer

In  no event shall Author be liable for any damages whatsoever (including,  without limitation, damages for loss of use, data or profit) arising out  of the use or inability to use the posting's information even if Author  has been advised of the possibility of such damage.

Posting

Ah, well if you need to make a routed port part of a VLAN, you convert it to a switch port and then you can place it into a VLAN.  To continue to route, you define a SVI for the VLAN with the same IP.

On a 6500, believe ports default to routed mode.

If you have something like:

int g1/1

ip address x.x.x.x

You can make it:

int g1/1

switchport

switchport access vlan #

int vlan#

ip address x.x.x.x

[ambivert skill]

Joseph,

Please have a look in the following pic regarding the deployment of FWSM will traffic move from 7613 to 6513 as it use to be now after deploying FWSM by this way ,currently FWSM is in 7613 chasis.

Actually I need to know some points.

1.If we change Gi0/1 routed port to L2 port by switch port cmmd and assign to VLAN 10 and create SVI interface VLAN 10 on MSFC of 7613 and assign IP of Gi0/1 i.e 192.168.1.10 to it will the traffic move from interfaces of my router to this interface (Gi0/1) currently we have static routes , I am not very much clear about this issue.

2.As mentioned in figure if create VLAN 10 and put Gi0/1 and inside interface ofFWSM will they communicate through SVI interface of VLAN 10 created on 7613 router with IP 192.168.1.10 and same concern for outside interface of FWSM and Gi0/2 of 6513 which are connected through SVI VLAN 20 on 6513 MSFC

please guide me know what correction I have to make in this plan.

Regards

Ambivert skill