Cisco Catalyst 6500 Series User Manual

4-4
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide
OL-6392-01
Chapter 4 Configuring the Firewall Mode
Firewall Mode Overview
For multiple context mode, the FWSM first classifies the packet according to either a unique VLAN
or a unique destination address. In this case, the VLAN would be unique; the www.cisco.com
IP address is not located uniquely within a context and is not a unique destination address.
3. The FWSM translates the local source address (10.1.2.27) to the global address 209.165.201.10,
which is on the outside interface subnet.
The global address could be on any subnet, but routing is simplified when it is on the outside
interface subnet.
4. The FWSM then records that a session is established and forwards the packet from the outside
interface.
5. When www.cisco.com responds to the request, the packet goes through the FWSM, and because the
session is already established, the packet bypasses the many lookups associated with a new
connection. The fast path performs NAT by translating the global destination address to the local
user address, 10.1.2.27.
6. The FWSM forwards the packet to the inside user.
An Outside User Visits a Website on the DMZ
Figure 4-3 shows an outside user accessing the DMZ website.
Figure 4-3 Outside to DMZ
Web Server
10.1.1.3
User
FWSM
Outside
Inside DMZ
Switch
209.165.201.2
10.1.1.110.1.2.1
104681
Dest Addr Translation
209.165.201.3 10.1.1.3

Cisco Catalyst 6500 Series Specifications

General

Brand	Cisco
Model	Catalyst 6500 Series
Category	Switch
Language	English