Core issue
This problem occurs when the VLAN and the firewall-group command are not added to the Multilayer Switch Feature Card (MSFC) prior to the addition of VLAN interfaces to the Cisco Firewall Services Module (FWSM).
Resolution
Add the VLAN and the firewall-group command to the MSFC before VLAN interfaces are added to the FWSM.
To add the firewall-group command, remove the interface from the FWSM and reapply the command on the MSFC. Then, re-add the interface and name the if statements to the FWSM. Now, the Switch Virtual Interface (SVI) successfully passes data between the MSFC and the FWSM.
For more information, refer to Preparing Your Network.
Firewall Services Module (FWSM)
1.1
Protocol / Ports
Internet Control Message Protocol (ICMP)
