Cisco Catalyst 6500 Series Configuration Manual page 24

Routed Firewall Configuration Steps
Task
Step 10 Configure routing using one of these methods:
Configuring Static Routes, page 8-3
•
(Single context mode only)
•
(Single context mode only)
•
Step 11
Use one or more of these NAT methods:
Using Dynamic NAT and PAT, page 9-16
•
• Using Static NAT, page 9-26
Using Static PAT, page 9-27
•
Bypassing NAT, page 9-29
•
Step 12
Adding an Extended Access Control List, page 10-13
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide
xxiv
Configuring OSPF, page 8-4
Configuring RIP, page 8-18
Description
In multiple context mode, static routing is the only
routing method supported. In single mode, you have
a choice of static, RIP, or OSPF. RIP support is for
passive mode only.
You must specifically configure some interfaces to
either use or bypass NAT. Typically, if you want to
allow inside users to access the outside or other
networks attached to the FWSM, configure dynamic
NAT or PAT according to the
and PAT" section on page
outside users to access an inside host, then configure
static NAT according to the
section on page 26.
The FWSM offers a large amount of flexibility in
your NAT configuration.
Before any traffic can go through the FWSM, you
must create an ACL that permits traffic, and then
apply it to an interface.
Quick Start Steps
"Using Dynamic NAT
16. If you want to allow
"Using Static NAT"
OL-6392-01