Svi Overview - Cisco Catalyst 6500 Series Configuration Manual

Adding Switched Virtual Interfaces to the MSFC

SVI Overview

For security reasons, by default, only one SVI can exist between the MSFC and the FWSM. For example,
if you misconfigure the system with multiple SVIs, you could accidentally allow traffic to pass around
the FWSM by assigning both the inside and outside VLANs to the MSFC. (See
Figure 2-1
VLAN 201
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide
2-6
Multiple SVI Misconfiguration
Internet
Switch
VLAN 100
MSFC
VLAN 200
FWSM
VLAN 201
Chapter 2 Configuring the Switch for the Firewall Services Module
Inside
Figure 2-1.)
OL-6392-01