Cisco Catalyst 6500 Series Configuration Manual page 25

Quick Start Steps
Transparent Firewall Configuration Steps
Follow these steps to configure the FWSM in transparent mode:
Task
Step 1 Assigning VLANs to the Firewall Services Module, page 2-2
Step 2 (Might be required)
the MSFC, page 2-5
Step 3 Sessioning and Logging into the Firewall Services Module,
page 3-1
Step 4 Setting the Firewall Mode, page 4-16
Step 5 (Might be required; multiple context mode only)
Disabling Multiple Context Mode, page 5-10
Step 6 (Multiple context mode only)
Context, page 5-19
Step 7 (Multiple context mode only)
and the System Execution Space, page 5-22
Step 8 Setting the Name and Security Level, page 6-7
Step 9 Setting the Management IP Address for a Transparent
Firewall, page 8-2
Step 10
Adding an Extended Access Control List, page 10-13
OL-6392-01
Adding Switched Virtual Interfaces to
Configuring a Security
Changing Between Contexts
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide
Description
On the switch, you need to assign VLANs to the
FWSM so the FWSM can send and receive traffic on
the switch.
If you want the MSFC to route between VLANs that
are assigned to the FWSM, complete this procedure.
From the switch CLI, you can session into the FWSM
to access the FWSM CLI.
Before you configure any settings, you must set the
firewall mode to transparent mode. Changing the
mode clears your configuration.
Enabling or If you want to use multiple context mode and your
FWSM is not already configured for it, or if you want
to change back to single mode, follow this procedure.
Add a security context.
You must configure some settings in the system
execution space, and some settings within the
context, so you need to know how to switch between
contexts and the system execution space.
For each VLAN interface, you must set a name (such
as inside or outside) and a security level.
The transparent firewall requires a management IP
address.
Before any traffic can go through the FWSM, you
must create an ACL that permits traffic, and then
apply it to an interface.
Transparent Firewall Configuration Steps
xxv