topic Re: Bridge Grouping in Network Security

Bridge Grouping

Richa05 — Fri, 21 Feb 2020 15:37:41 GMT

I want two interfaces to be bridged, where the scenario is i have connected management interface to gigabit1/4 and bridging applies between gigabit1/1 and gigabit1/4..so that i only get one uplink for both ASDM and firepower.

Is it possible to do or there is some challenge in that..

Re: Bridge Grouping

dlf — Fri, 13 Apr 2018 06:33:04 GMT

No challenge at all. This is actually the default configuration (ASA 9.7 and later) after "configure factory-default"

!
interface GigabitEthernet1/1
 bridge-group 1
 nameif bvi1-1
 security-level 100
!
interface GigabitEthernet1/4
 nameif bvi1-4
 security-level 100
 description FirePOWER
!
interface BVI1
no nameif
 nameif inside
 security-level 100
 ip address 10.1.1.1 255.255.255.0

Re: Bridge Grouping

Richa05 — Fri, 13 Apr 2018 06:57:03 GMT

i have done the same configuration on ASA however the only difference was taking security level 0...I am unable to get firepower access

Re: Bridge Grouping

dlf — Fri, 13 Apr 2018 10:37:22 GMT

Management Access on BVI was only recently added with version 9.9.2.

See "History for Management Access" in:

https://www.cisco.com/c/en/us/td/docs/security/asa/asa99/configuration/general/asa-99-general-config/admin-management.html