Configuring Intra-Interface Communication - Cisco 7604 Configuration Manual

Catalyst 6500 series switch and cisco 7600 series router firewall services module configuration guide using the cli

Hide thumbs Also See for 7604:

Table of Contents

Configuring Interface Parameters

Configuring Intra-Interface Communication

You can configure the FWSM to enable communication between two hosts on the same interface. Before

you can enable this feature, you must first correctly configure the MSFC so that packets are sent to the

FWSM MAC address instead of being sent directly through the switch to the destination host.

shows a network where hosts on the same interface need to communicate. The following samples show

the route-map command used to enable policy routing on the MSFC in the network shown in

Router(config)# route-map intra-inter3 permit 0

Router(config-route-map)# match ip address 103

Router(config-route-map)# set interface Vlan20

Router(config-route-map)# set set ip next-hop 10.6.34.7

Router(config)# route-map intra-inter2 permit 20

Router(config-route-map)# match ip address 102

Router(config-route-map)# set interface Vlan20

Router(config-route-map)# set set ip next-hop 10.6.34.7

Router(config)# route-map intra-inter1 permit 10

Router(config-route-map)# match ip address 101

Router(config-route-map)# set interface Vlan20

Router(config-route-map)# set set ip next-hop 10.6.34.7

When you enable communication between two hosts on the same interface, keep in mind the following

requirements:

Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM

Communication Between Hosts on the Same Interface

Outside NAT is not supported.

You can configure static routes from one interface to another on the same security level.

Allowing Communication Between Interfaces on the Same Security Level

Show Quick Links

Table of Contents