topic Re: ASA transarent using subinterfaces in Network Security

ASA transarent using subinterfaces

cmarin — Thu, 17 Oct 2024 23:51:22 GMT

Hi Experts,

I am configuring an ISA 3000 in transparent mode using subinterfaces.

I created a BVI1 and assign the bridge-group 1 into the subinterfaces using separated vlans.

But I am not able to send traffic into the same BVI, firewall shows the following message in capture:

802.3 encap packet Drop-reason: (dst-l2_lookup-fail) Dst MAC L2 Lookup Failed, Drop-location: frame snp_fp_process_l2_packet:2122 flow

Any suggestion will be very appreciated.

Flavio Miranda — Fri, 18 Oct 2024 00:43:26 GMT

The description matches with the Bug CSCva56343

MHM Cisco World — Thu, 31 Oct 2024 07:57:37 GMT

this issue solved ?

MHM

cmarin — Fri, 01 Nov 2024 14:11:43 GMT

Hi,

It was an issue on the layer 2 switch behind the firewall.

I assigned the mode access ports but I did not create the vlan xx so the interfaces did not know how to tag it.

I noticed it when I checked the show vlan