topic Re: ASA Transparent config question in Network Security

ASA Transparent config question

Justin Westover — Mon, 11 Mar 2019 21:28:27 GMT

So I have a 5585-s10 and I would like to use it in transparent mode but I have several questions.

1. If in transparent mode, can I use more than two interfaces without using multiple contexts?

2. If I used multiple contexts could servers in context one be allowed to communicate with servers in context 2 an d vice versa?

3. If in transparent mode, would the firewall have to be line or could it hang off of a port on our nexus switch?

So I would like to be able to hang the Asa is transparent mode off of a port on our nexus instead of placing the Asa inline between our top of rack switches and our nexus. So I'm not sure if it is possible to trunk a port on the nexus and connect the Asa to that? I'm just unsure how this would all work obviously haha.

Sent from Cisco Technical Support iPhone App

ASA Transparent config question

Jon Marshall — Thu, 22 Sep 2011 10:53:21 GMT

Justin

1) Yes you can, you can use what are called bridge groups. Each bridge group can use up to 4 interfaces.

2) Yes but you cannot share interfaces between contexts so you would need to route them via a L3 device

3) As far as i know not you can't do this. The firewall in transparent mode needs an outside and inside interface as it is simply an inline device through which traffic passes.

Jon

Re: ASA Transparent config question

Justin Westover — Thu, 22 Sep 2011 13:18:21 GMT

So I would need an interface on the Asa inline with all of the uplinks from our access layer switches going to our nexus layer 3 switch?

Sent from Cisco Technical Support iPhone App

Re: ASA Transparent config question

alanc3141592654 — Sat, 18 Feb 2012 05:56:37 GMT

Did you get a solution for this?