topic Re: ftd-transparent-mode-vlan-tagging-on-bridge-interface in Network Security

ftd-transparent-mode-vlan-tagging-on-bridge-interface

Rizwan Shah — Mon, 26 Feb 2024 09:33:49 GMT

Dear Community

we want to deploy firepower 3105 - ver 7.3.1 between distribution switch and core switch along with vlan tagging from both sides means vlan tag can be carried from distribution to core and from core to distribution for this purpose we choose firewall mode transparent and did the bridging between switches single vlan no issue.

but need help for multiple vlan tagging on transparent mode on firepower.

Re: ftd-transparent-mode-vlan-tagging-on-bridge-interface

MHM Cisco World — Mon, 26 Feb 2024 13:48:04 GMT

config trunk
config VLAN
config BDI between two VLAN (ingress and egress VLAN)
MHM

Re: ftd-transparent-mode-vlan-tagging-on-bridge-interface

Rizwan Shah — Tue, 27 Feb 2024 05:31:14 GMT

Thanks for the response , let me explain the scenario am using fmc 7.4.1 and for trunk config i didn't found actually as i have may be 30 vlans which will traverse from distribution switch to core switch under transparent firewall ftd and didn't found trunk configuration on fmc so that vlan tags can be travel from distribution switch to firewall then to core switch actually core switch is acting as gateway for all vlans, we can't use firewall as gateway.

bridge i already created for distribution switch as ingress and to core switch as egress but since no trunk configuration so multiple vlan cannot travel but if i assigned one vlan its working fine but i want multiple vlan tags should travel with bridge so that core switch as gateway can be used for all users under the transparent firewall.

Regards

Re: ftd-transparent-mode-vlan-tagging-on-bridge-interface

MHM Cisco World — Thu, 29 Feb 2024 20:19:52 GMT

https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-v70/regular_firewall_interfaces_for_firepower_threat_defense.html#task_ynl_x2c_b3b

this guide to config trunk via FMC

MHM

Re: ftd-transparent-mode-vlan-tagging-on-bridge-interface

Rizwan Shah — Sun, 03 Mar 2024 06:37:53 GMT

Thanks but am using fmcv and i didn't found these options

Re: ftd-transparent-mode-vlan-tagging-on-bridge-interface

Rizwan Shah — Sun, 24 Mar 2024 11:22:54 GMT

am wondering why i didn't find trunk configuration on fmc but anyway i chooses inline mode some how its working for me

Re: ftd-transparent-mode-vlan-tagging-on-bridge-interface

MHM Cisco World — Sun, 24 Mar 2024 11:28:45 GMT

Sorry alot I forget your case totally'

Can yoh share

Device -> Interface

From fmc

MHM

Re: ftd-transparent-mode-vlan-tagging-on-bridge-interface

Rizwan Shah — Sun, 24 Mar 2024 11:39:43 GMT

thanks here is attached

Re: ftd-transparent-mode-vlan-tagging-on-bridge-interface

Rizwan Shah — Sun, 24 Mar 2024 12:55:39 GMT

updated

Re: ftd-transparent-mode-vlan-tagging-on-bridge-interface

MHM Cisco World — Tue, 26 Mar 2024 11:38:50 GMT

two steps

first make the interface switch port then config trunk