topic Traffic Flow between Transparent and Routed FW. in Network Security

Traffic Flow between Transparent and Routed FW.

mahesh18 — Tue, 12 Mar 2019 01:54:17 GMT

Hi Everyone,

Need to confirm here the traffic flow between 2 FW.

Say we have Core Switch 1 it is learning route to subnet 172.x.x.x via interface x of Routed FW.

Routed FW learns Route to Destination subnet 172.x.x.x via its interface Y.

Now Interface Y connects to interface Y of Transparent FW.

Transparent FW has interface Z which has destination subnet 172.x.x.x.

So in short we can say that if someone need to reach the Destination subnet 172..x.x.x and its default gateway is core switch then traffic will follow the

above path to reach the subnet 172.x.x.x??

Regards

Mahesh

Traffic Flow between Transparent and Routed FW.

Julio Carvajal — Fri, 07 Jun 2013 16:44:13 GMT

Hello Mahesh,

Well,

The Transparent Firewall cannot route so I would say that

The interface Y of the Router FW and both interfaces on the transparent firewall on the 172.16.x.x..

That would make sense but you cannot route to a subnet via a transparent firewall IP address.

The transparent firewall does not have a routing table to route traffic across itself.

Regards

Julio

Traffic Flow between Transparent and Routed FW.

mahesh18 — Fri, 07 Jun 2013 16:53:20 GMT

Hi julio,

you are correct as transparent FW is just layer 2 and both interfaces Y and Z have same IP address.

So in order to move packet from interface Y to Z transparent FW uses arp table to get the mac of device connected to interface Z of transparent FW?

Regards

Mahesh

Traffic Flow between Transparent and Routed FW.

Julio Carvajal — Fri, 07 Jun 2013 16:57:33 GMT

Hello Mahesh,

If the FW Y interface and Transparent Firewall is on the 172.x subnet ( the destination you are trying to go you are going to be fine),

Is this the case?

Traffic Flow between Transparent and Routed FW.

mahesh18 — Fri, 07 Jun 2013 17:00:30 GMT

Hi Julio,

Yes Dest subnet and Y interface of Transparent FW are on same subnet.

So FW just forward the packet to device by looking at mac address table right?

Regards

Mahesh

Traffic Flow between Transparent and Routed FW.

Julio Carvajal — Fri, 07 Jun 2013 17:01:36 GMT

Hello

Exactly, the packet will be forward to the LAN, then the devices in between FW transparent and switches will send the traffic to the right ports,

Julio