Cisco Cisco MGX-FRSM-HS2 B Serial Frame Service Module 情報ガイド
Cisco Systems, Inc.
All contents are Copyright © 1992–2004 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement.
Page 1 of 10
Q & A
CISCO FIREWALL SERVICES MODULE FAQ
Q.
Can a FlexWAN interface terminate on the FWSM?
A.
Not at this time. FlexWAN interfaces and routed ports use hidden VLANs which can’t be passed directly to a firewall vlan-group.
The WAN traffic must terminate on the MSFC and then pass to the FWSM using another VLAN.
Q.
Can we pass traffic between two interfaces at the same security level?
A.
Yes in FWSM2.2, No in FWSM1.1. A command has been provided to allow traffic to pass between interfaces at the same security level
(
same-security-level permit inter interface
). In addition to invoking this command, the policy must be configured to allow the
traffic to pass.
Q.
Can we configure more than one interface at security level 100 (inside)?
A.
Yes in FWSM2.2, No in FWSM1.1.
FWSM2.2 eliminates the special status given to interfaces with names “inside” and “outside”. Beginning with the 2.2 release, the user can
assign any name to an interface and configure any security level between 0 to 100 for that interface.
Q.
The FWSM has a label that states, “Do not remove card while status light is green or disk corruption may occur.” What does this mean?
A.
The firewall module should be removed only after disabling power using one of the following methods. (There is no preference for a
particular method.)
Use the switch’s command-line interface (CLI) and issue one of the following commands.
•
CatOS—
set module power down mod
•
Cisco IOS
®
Software—
no power enable module slot
•
Press the shutdown button on the blade.
•
Physically power down the chassis.
•
When the status light in longer green, you may remove the module safely.
Q.
I used the show module command, and my FWSM has a status of faulty/other. What should I do?
A.
Refer to the following checklist to troubleshoot an FWSM with a status of faulty/other.
•
Ensure that you are running a supported version of code on your switch. Ensure that the FWSM can co-exist with the other blades located in
the same chassis. Refer to the Catalyst 6500 Release Notes and/or Software Advisor ( registered customers only) for
further information.
•
If you are running CatOS/Hybrid code on your switch, reset the configuration for the slot occupied by the FWSM module. To do this, use
the following commands.
•
Type set module power down mod to power down the FWSM.
•
Type to clear the switch’s configuration associated with that slot and to power up the module.