topic why ASA in transparent mode require same ip subnet to that of co in Network Security https://community.cisco.com/t5/network-security/why-asa-in-transparent-mode-require-same-ip-subnet-to-that-of/m-p/2389275#M271648 <HTML><HEAD></HEAD><BODY><P style="background-color: #f7fafb; border-collapse: collapse; font-size: 12px; list-style: none; font-family: Arial, verdana, sans-serif;">Hello Vijay,</P><P></P><P style="background-color: #f7fafb; border-collapse: collapse; font-size: 12px; list-style: none; font-family: Arial, verdana, sans-serif;">As you say you can use another one, That's correct but the thing is that the management IP is not only used for management purporses.</P><P></P><P style="background-color: #f7fafb; border-collapse: collapse; font-size: 12px; list-style: none; font-family: Arial, verdana, sans-serif;">That's were you are missing the point.</P><P></P><P style="background-color: #f7fafb; border-collapse: collapse; font-size: 12px; list-style: none; font-family: Arial, verdana, sans-serif;">That IP address assigned to the ASA as a whole will also be used for ARP requests when the ASA does not know where the destination hosts lies and it's not on the same subnet than the ASA.</P><P></P><P style="background-color: #f7fafb; border-collapse: collapse; font-size: 12px; list-style: none; font-family: Arial, verdana, sans-serif;">It will also be used as a source for packets going to a syslog server, AAA server, Netflow server, SNMP server and any packet that the ASA will need to create so with that in mind the routing of the network will need to be changed to work with this.</P><P></P><P style="background-color: #f7fafb; border-collapse: collapse; font-size: 12px; list-style: none; font-family: Arial, verdana, sans-serif;">If you get to accomplish that the routing of the network works with a different Management IP address on the transparent address then you can do it. I can ensure you I have seen this scenario before working with no issues at all bud.</P><P></P><P style="background-color: #f7fafb; border-collapse: collapse; font-size: 12px; list-style: none; font-family: Arial, verdana, sans-serif;">Just to remember <STRONG style="border-collapse: collapse; list-style: none;">rate all of the helpful posts</STRONG> like this one <SPAN __jive_emoticon_name="grin"></SPAN></P><P></P><P></P><P style="background-color: #f7fafb; border-collapse: collapse; font-size: 12px; list-style: none; font-family: Arial, verdana, sans-serif;">Looking for some Networking Assistance?&nbsp; <BR />Contact me directly at <A href="mailto:jcarvaja@laguiadelnetworking.com" rel="nofollow" style="border-collapse: collapse; list-style: none; outline: none; padding: 1px 0px 1px 17px; color: #2f6681; text-decoration: none; zoom: 1; background-position: no-repeat no-repeat;">jcarvaja@laguiadelnetworking.com</A> </P><P></P><P>I will fix your problem ASAP. </P><P></P><P>Cheers, </P><P></P><P>Julio Carvajal Segura <BR /><A href="http://laguiadelnetworking.com/" rel="nofollow" style="border-collapse: collapse; list-style: none; outline: none; color: #2f6681; text-decoration: none;">http://laguiadelnetworking.com</A></P></BODY></HTML> Mon, 13 Jan 2014 17:44:33 GMT Julio Carvajal 2014-01-13T17:44:33Z why ASA in transparent mode require same ip subnet to that of connected network https://community.cisco.com/t5/network-security/why-asa-in-transparent-mode-require-same-ip-subnet-to-that-of/m-p/2389274#M271645 <P>In&nbsp; ASA transparent mode, Why it is necessary to keep management ip in the same subnet to that of connected network?</P><P>what if I keep management ip in diffrent subnet than that of connected network?</P><P>If I do so does the traffic move through the asa and why?</P><P>thanxs.</P> Tue, 12 Mar 2019 03:28:52 GMT https://community.cisco.com/t5/network-security/why-asa-in-transparent-mode-require-same-ip-subnet-to-that-of/m-p/2389274#M271645 vijay1926 2019-03-12T03:28:52Z why ASA in transparent mode require same ip subnet to that of co https://community.cisco.com/t5/network-security/why-asa-in-transparent-mode-require-same-ip-subnet-to-that-of/m-p/2389275#M271648 <HTML><HEAD></HEAD><BODY><P style="background-color: #f7fafb; border-collapse: collapse; font-size: 12px; list-style: none; font-family: Arial, verdana, sans-serif;">Hello Vijay,</P><P></P><P style="background-color: #f7fafb; border-collapse: collapse; font-size: 12px; list-style: none; font-family: Arial, verdana, sans-serif;">As you say you can use another one, That's correct but the thing is that the management IP is not only used for management purporses.</P><P></P><P style="background-color: #f7fafb; border-collapse: collapse; font-size: 12px; list-style: none; font-family: Arial, verdana, sans-serif;">That's were you are missing the point.</P><P></P><P style="background-color: #f7fafb; border-collapse: collapse; font-size: 12px; list-style: none; font-family: Arial, verdana, sans-serif;">That IP address assigned to the ASA as a whole will also be used for ARP requests when the ASA does not know where the destination hosts lies and it's not on the same subnet than the ASA.</P><P></P><P style="background-color: #f7fafb; border-collapse: collapse; font-size: 12px; list-style: none; font-family: Arial, verdana, sans-serif;">It will also be used as a source for packets going to a syslog server, AAA server, Netflow server, SNMP server and any packet that the ASA will need to create so with that in mind the routing of the network will need to be changed to work with this.</P><P></P><P style="background-color: #f7fafb; border-collapse: collapse; font-size: 12px; list-style: none; font-family: Arial, verdana, sans-serif;">If you get to accomplish that the routing of the network works with a different Management IP address on the transparent address then you can do it. I can ensure you I have seen this scenario before working with no issues at all bud.</P><P></P><P style="background-color: #f7fafb; border-collapse: collapse; font-size: 12px; list-style: none; font-family: Arial, verdana, sans-serif;">Just to remember <STRONG style="border-collapse: collapse; list-style: none;">rate all of the helpful posts</STRONG> like this one <SPAN __jive_emoticon_name="grin"></SPAN></P><P></P><P></P><P style="background-color: #f7fafb; border-collapse: collapse; font-size: 12px; list-style: none; font-family: Arial, verdana, sans-serif;">Looking for some Networking Assistance?&nbsp; <BR />Contact me directly at <A href="mailto:jcarvaja@laguiadelnetworking.com" rel="nofollow" style="border-collapse: collapse; list-style: none; outline: none; padding: 1px 0px 1px 17px; color: #2f6681; text-decoration: none; zoom: 1; background-position: no-repeat no-repeat;">jcarvaja@laguiadelnetworking.com</A> </P><P></P><P>I will fix your problem ASAP. </P><P></P><P>Cheers, </P><P></P><P>Julio Carvajal Segura <BR /><A href="http://laguiadelnetworking.com/" rel="nofollow" style="border-collapse: collapse; list-style: none; outline: none; color: #2f6681; text-decoration: none;">http://laguiadelnetworking.com</A></P></BODY></HTML> Mon, 13 Jan 2014 17:44:33 GMT https://community.cisco.com/t5/network-security/why-asa-in-transparent-mode-require-same-ip-subnet-to-that-of/m-p/2389275#M271648 Julio Carvajal 2014-01-13T17:44:33Z why ASA in transparent mode require same ip subnet to that of co https://community.cisco.com/t5/network-security/why-asa-in-transparent-mode-require-same-ip-subnet-to-that-of/m-p/2389276#M271650 <HTML><HEAD></HEAD><BODY><P>Thanx <STRONG> jcarvaja ...</STRONG></P></BODY></HTML> Mon, 13 Jan 2014 18:29:51 GMT https://community.cisco.com/t5/network-security/why-asa-in-transparent-mode-require-same-ip-subnet-to-that-of/m-p/2389276#M271650 vijay1926 2014-01-13T18:29:51Z why ASA in transparent mode require same ip subnet to that of co https://community.cisco.com/t5/network-security/why-asa-in-transparent-mode-require-same-ip-subnet-to-that-of/m-p/2389277#M271653 <HTML><HEAD></HEAD><BODY><P>Hello Vijay,</P><P></P><P>Any time Sr.</P><P></P><P>Looking for some Networking Assistance?&nbsp; <BR /><SPAN>Contact me directly at </SPAN><A class="jive-link-email-small" href="mailto:jcarvaja@laguiadelnetworking.com">jcarvaja@laguiadelnetworking.com</A><SPAN> </SPAN><BR /> <BR />I will fix your problem ASAP. <BR /> <BR />Cheers, <BR /> <BR />Julio Carvajal Segura <BR /><A class="jive-link-external-small" href="http://laguiadelnetworking.com">http://laguiadelnetworking.com</A></P></BODY></HTML> Mon, 13 Jan 2014 18:31:05 GMT https://community.cisco.com/t5/network-security/why-asa-in-transparent-mode-require-same-ip-subnet-to-that-of/m-p/2389277#M271653 Julio Carvajal 2014-01-13T18:31:05Z why ASA in transparent mode require same ip subnet to that of co https://community.cisco.com/t5/network-security/why-asa-in-transparent-mode-require-same-ip-subnet-to-that-of/m-p/2389278#M271655 <HTML><HEAD></HEAD><BODY><P>thanxs for the reply Julio Carvajal Segura. If I want any assistance regarding networking I will contact you on your Email as you have specified.</P><P>Once again thanxs a lot.</P></BODY></HTML> Mon, 13 Jan 2014 18:38:06 GMT https://community.cisco.com/t5/network-security/why-asa-in-transparent-mode-require-same-ip-subnet-to-that-of/m-p/2389278#M271655 vijay1926 2014-01-13T18:38:06Z why ASA in transparent mode require same ip subnet to that of co https://community.cisco.com/t5/network-security/why-asa-in-transparent-mode-require-same-ip-subnet-to-that-of/m-p/2389279#M271658 <HTML><HEAD></HEAD><BODY><P>Hello Vijay,</P><P></P><P>Sure, it will be my pleasure to work with you.</P><P></P><P></P><P>Looking for some Networking Assistance?&nbsp; <BR /><SPAN>Contact me directly at </SPAN><A class="jive-link-email-small" href="mailto:jcarvaja@laguiadelnetworking.com">jcarvaja@laguiadelnetworking.com</A><SPAN> </SPAN><BR /> <BR />I will fix your problem ASAP. <BR /> <BR />Cheers, <BR /> <BR />Julio Carvajal Segura <BR /><A class="jive-link-external-small" href="http://laguiadelnetworking.com">http://laguiadelnetworking.com</A></P></BODY></HTML> Mon, 13 Jan 2014 18:48:21 GMT https://community.cisco.com/t5/network-security/why-asa-in-transparent-mode-require-same-ip-subnet-to-that-of/m-p/2389279#M271658 Julio Carvajal 2014-01-13T18:48:21Z