Configuring Svis For Cisco Ios Software On The Supervisor Engine - Cisco Catalyst 6500 Series Configuration Manual

Adding Switched Virtual Interfaces to the MSFC
For transparent firewalls in multiple context mode, you need to use multiple SVIs because each context
requires a unique VLAN on its outside interface (See
SVIs in routed mode so you do not have to share a single VLAN for the outside interface.
Figure 2-3
Switch
Admin
Context

Configuring SVIs for Cisco IOS Software on the Supervisor Engine

If you are running Cisco IOS software on the supervisor engine, follow these steps to add an SVI to the
MSFC:
(Optional) To allow you to add more than one SVI to the FWSM, enter the following command:
Step 1
Router(config)# firewall multiple-vlan-interfaces
To add a VLAN interface to the MSFC, enter the following command:
Step 2
Router(config)# interface vlan vlan_number
To set the IP address for this interface on the MSFC, enter the following command:
Step 3
Router(config-if)# ip address address mask
Step 4 To enable the interface, enter the following command:
Router(config-if)# no shut
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide
2-8
Multiple SVIs in Multiple Context Mode
VLAN 151
VLAN 150
Context A
VLAN 201 VLAN 202
Admin Inside
Network Customer A
Chapter 2 Configuring the Switch for the Firewall Services Module
Figure 2-3). You might also choose to use multiple
Internet
VLAN 100
VLAN 152
VLAN 153
Context B Context C
VLAN 203
Inside
Customer B
VLAN 204
Inside
Customer C
OL-6392-01