topic Bridge Groups, are they required? in Network Security

Bridge Groups, are they required?

patoberli — Mon, 11 Mar 2019 23:19:37 GMT

Hi All

I'm currently a tad confused about Bridge Groups and ASA/FWSM in transparent more. Are they really required or not?

Here one sample: http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/interface_complete_transparent.html

It's written:

At least one bridge group is required per context or in single mode.

So that really sounds like yes you need one.

Where as this config sample here: http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008089f467.shtml or many others I found online, never have a bridge group configured.

Could somebody please enlighten me about what is correct?

And does it matter if it's an active/standby configuration?

Thanks a lot

pato

Bridge Groups, are they required?

Kureli Sankar — Mon, 18 Jun 2012 20:48:30 GMT

Pato,

It depends. On the newer ASA and FWSM you need the BVI. It is just to configure the management IP. This is required.

The old link (the second one that you listed) has the management IP (not under the int BVI) but on the newer ASA code you can see it is configured under the int BVI as you can see here:

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/interface_complete_transparent.html#wp1382356

-Kureli

Bridge Groups, are they required?

patoberli — Tue, 19 Jun 2012 06:32:46 GMT

Thanks for your answer. I was led to this question because we seem to hit

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCti13482 even in 8.4.3

I had the hope that it might be because of the BVI, but seems not so.