Cisco 6500 - Catalyst Series 10 Gigabit EN Interface Module Expansion, Configuration Manual, Page: 6 / 742

Contents
vi
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
C H A P T E R
5
Configuring the Firewall Mode
5-1
Routed Mode Overview
5-1
IP Routing Support
5-1
How Data Moves Through the FWSM in Routed Firewall Mode
5-2
An Inside User Visits a Web Server
5-2
An Outside User Visits a Web Server on the DMZ
5-3
An Inside User Visits a Web Server on the DMZ
5-4
An Outside User Attempts to Access an Inside Host
5-5
A DMZ User Attempts to Access an Inside Host
5-6
Transparent Mode Overview
5-7
Transparent Firewall Network
5-7
Bridge Groups
5-7
Management Interface
5-8
Allowing Layer 3 Traffic
5-8
Allowed MAC Addresses
5-8
Passing Traffic Not Allowed in Routed Mode
5-8
MAC Address vs. Route Lookups
5-9
Using the Transparent Firewall in Your Network
5-9
Transparent Firewall Guidelines
5-10
Unsupported Features in Transparent Mode
5-11
How Data Moves Through the Transparent Firewall
5-12
An Inside User Visits a Web Server
5-13
An Inside User Visits a Web Server Using NAT
5-14
An Outside User Visits a Web Server on the Inside Network
5-15
An Outside User Attempts to Access an Inside Host
5-16
Setting Transparent or Routed Firewall Mode
5-17
C H A P T E R
6
Configuring Interface Parameters
6-1
Security Level Overview
6-1
Configuring Interfaces for Routed Firewall Mode
6-2
Guidelines and Limitations
6-2
Configuring an Interface
6-3
Configuring Interfaces for Transparent Firewall Mode
6-4
Information About Interfaces in Transparent Mode
6-4
Information About Bridge Groups
6-4
Information About Device Management
6-4
Guidelines and Limitations
6-5
Configuring Transparent Firewall Interfaces for Through Traffic
6-6
Assigning an IP Address to a Bridge Group
6-6