topic Re: layer-2 firewall in Network Security

layer-2 firewall

gavin han — Mon, 11 Mar 2019 19:46:26 GMT

Hi,

I'm interested in layer-2 firewall feature set.

internet--->firewall---->(load balancer)

load balancer is in our internal network....so all traffic will hit the load balancer VIP and they load balancer will route traffic to the server. load balancer and servers needs to be segregated from our internal network...

is it possible with ASA's layer-2 feature set?

Re: layer-2 firewall

Federico Coto Fajardo — Tue, 08 Feb 2011 03:20:53 GMT

Hi Gavin,

I don't think you should have any problems.

The ASA can act as a layer 2 firewall in transparent mode (much as a switch) but with the advantage of still having the firewall apply its security rules to the traffic passing through it.

Federico.

Re: layer-2 firewall

Jennifer Halim — Tue, 08 Feb 2011 03:21:05 GMT

Do you mean L2 (transparent) firewall? If yes, then the answer is yes, ASA firewall supports 2 modes: routed (L3) mode and transparent (L2) mode.

Here is configuration guide on the 2 firewall modes:

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/fwmode.html

Hope that helps.