Cisco 7604 Configuration Manual page 6

Contents
Configuring the Firewall Mode
5
C H A P T E R
Configuring Interface Parameters
6
C H A P T E R
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
vi
Routed Mode Overview
5-1
IP Routing Support
5-1
How Data Moves Through the FWSM in Routed Firewall Mode
An Inside User Visits a Web Server
An Outside User Visits a Web Server on the DMZ
An Inside User Visits a Web Server on the DMZ
An Outside User Attempts to Access an Inside Host
A DMZ User Attempts to Access an Inside Host
Transparent Mode Overview
Transparent Firewall Network
Bridge Groups
5-7
Management Interface
Allowing Layer 3 Traffic
Allowed MAC Addresses
Passing Traffic Not Allowed in Routed Mode
MAC Address vs. Route Lookups
Using the Transparent Firewall in Your Network
Transparent Firewall Guidelines
Unsupported Features in Transparent Mode
How Data Moves Through the Transparent Firewall
An Inside User Visits a Web Server
An Inside User Visits a Web Server Using NAT
An Outside User Visits a Web Server on the Inside Network
An Outside User Attempts to Access an Inside Host
Setting Transparent or Routed Firewall Mode
Security Level Overview
6-1
Configuring Interfaces for Routed Firewall Mode
Guidelines and Limitations
Configuring an Interface
Configuring Interfaces for Transparent Firewall Mode
Information About Interfaces in Transparent Mode
Information About Bridge Groups
Information About Device Management
Guidelines and Limitations
Configuring Transparent Firewall Interfaces for Through Traffic
Assigning an IP Address to a Bridge Group
5-1
5-2
5-7
5-7
5-8
5-8
5-8
5-8
5-9
5-9
5-10
5-11
5-13
5-17
6-1
6-2
6-2
6-3
6-4
6-4
6-4
6-5
6-6
5-2
5-3
5-4
5-5
5-6
5-12
5-14
5-15
5-16
6-4
6-6
OL-20748-01