[c-nsp] FWSM Deployment

[Mark Tohill]

Hi,
 
We have 2 x 6500's with single Sup720's running native IOS 12.2(18)SXF4
and intend to deploy the FWSM running 3.2 software.
 
Despite the 3.2 configuration guide being fairly good at describing the
placement of MSFC with regard to FWSM etc., can any one help regarding
the following:
 
1. Placement of FWSM with regard to MSFC, the pros and cons.
2. In a routed single-context mode, what is the requirement to getting
traffic to the blade, above and beyond the firewall 'vlan-group
<firewall-group> <vlan-range>' and 'firewall module <module> vlan-group'
commands?
3. What exactly dictates whether the FWSM in in front of or behind the
MSFC? Is it the order of the VLAN ID's?
 
I'm confused. Any help appreciated.
 
Thanks,
Mark
 
Mark Tohill
UTV Internet
E:mark at u.tv <blocked::mailto:mark at u.tv>