Cisco Catalyst 6500 Series Configuration Manual page 23

Quick Start Steps
The following sections describe the minimum configuration required for the Firewall Services Module
(FWSM) in routed mode or transparent mode:
•
•
Routed Firewall Configuration Steps
Follow these steps to configure the FWSM in routed mode:
Task
Step 1 Assigning VLANs to the Firewall Services Module, page 2-2
Step 2
(Might be required)
the MSFC, page 2-5
Step 3 Sessioning and Logging into the Firewall Services Module,
page 3-1
Step 4
(Might be required; multiple context mode only)
Disabling Multiple Context Mode, page 5-10
Step 5 (Multiple context mode only)
Context, page 5-19
Step 6 (Multiple context mode only)
and the System Execution Space, page 5-22
Step 7 Setting the Name and Security Level, page 6-7
Step 8
Assigning IP Addresses to Interfaces for a Routed Firewall,
page 8-2
Step 9
Configuring the Default Route, page 8-2
OL-6392-01
Routed Firewall Configuration Steps, page xxiii
Transparent Firewall Configuration Steps, page xxv
Adding Switched Virtual Interfaces to
Configuring a Security
Changing Between Contexts
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide
Description
On the switch, you need to assign VLANs to the
FWSM so the FWSM can send and receive traffic on
the switch.
If you want the Multilayer Switch Feature Card
(MSFC) to route between VLANs that are assigned to
the FWSM, complete this procedure.
From the switch CLI, you can session into the FWSM
to access the FWSM CLI.
Enabling or If you want to use multiple context mode and your
FWSM is not already configured for it, or if you want
to change back to single mode, follow this procedure.
Add a security context.
You must configure some settings in the system
execution space, and some settings within the
context, so you need to know how to switch between
contexts and the system execution space.
For each VLAN interface, you must set a name (such
as inside or outside) and a security level.
Assign an IP address to each interface.
Create a default route to an upstream router.
xxiii