Example 2: Single Mode Firewall Using Same Security Level Example - Cisco 7604 Configuration Manual

Catalyst 6500 series switch and cisco 7600 series router firewall services module configuration guide using the cli

Hide thumbs Also See for 7604:

Table of Contents

Routed Mode Sample Configurations

firewall vlan-group 1 3-8

interface vlan 3

Example 2: Single Mode Firewall Using Same Security Level Example

The following configuration creates three internal interfaces. Two of the interfaces connect to

departments that are on the same security level. The DMZ interface hosts a syslog server. The

management host on the outside needs access to the Syslog server and the FWSM. To connect to the

FWSM, the host uses a VPN connection. FWSM uses RIP on the inside interfaces to learn routes.

Because the FWSM does not advertise routes with RIP, the upstream router needs to use static routes for

FWSM traffic (see

The Department networks are allowed to access the Internet and use PAT.

Department 1

See the following sections for the configurations for this section:

Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM

ip address 209.165.201.1 255.255.255.224

209.165.201.3

Department 2

Department 2

Management Host

209.165.200.225

209.165.201.1

Syslog Server

Sample Configurations

Show Quick Links

Table of Contents