Cisco Secure Firewall 3100 - Classification Examples

Classification Examples
Packet Classification with a Shared Interface Using MAC Addresses
The following figure shows multiple instances sharing an outside interface. The classifier assigns the packet
to Instance C because Instance C includes the MAC address to which the router sends the packet.
Figure 6: Packet Classification with a Shared Interface Using MAC Addresses
Incoming Traffic from Inside Networks
Note that all new incoming traffic must be classified, even from inside networks. The following figure shows
a host on the Instance C inside network accessing the internet. The classifier assigns the packet to Instance C
because the ingress interface is Ethernet 1/2.3, which is assigned to Instance C.
Multi-Instance Mode for the Secure Firewall 3100
8
Multi-Instance Mode for the Secure Firewall 3100
Classification Examples