2-7
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide
OL-6392-01
Chapter 2 Configuring the Switch for the Firewall Services Module
Adding Switched Virtual Interfaces to the MSFC
However, you might need to bypass the FWSM in some network scenarios. Figure 2-2 shows an IPX
host on the same Ethernet segment as IP hosts. Because the FWSM in routed firewall mode only handles
IP traffic and drops other protocol traffic like IPX (transparent firewall mode can optionally allow non-IP
traffic), you might want to bypass the FWSM for IPX traffic. Make sure to configure the MSFC with an
ACL that allows only IPX traffic to pass on VLAN 201.
Figure 2-2 Multiple SVIs for IPX
FWSM
MSFC
Inside
VLAN 200
VLAN 100
VLAN 201
VLAN 201
Internet
Switch
IPX Host IP Host
104666