cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3464
Views
7
Helpful
6
Replies

cisco asa 5520 in transparent mode

a.bonthala
Level 1
Level 1

Hello all,

I am new to cisco ASA. I need to configure ASA 5520 in transparent bridge mode. I have the following setup below attached.

cisco 2811

f0/0.10 = 192.168.10.1/24

f0/0.20 = 192.168.20.1/24

cisco 2950 Swtich:

f0/0 = switch port trunk

f0/1 = switch port access vlan 10

f0/2 = switch port access vlan 20

I need to place the new asa firewall in transparent mode. can any one help me how to configure the firewall in transparent bridgmode.

6 Replies 6

Hello Ananth,

To my knowledge we can not configure transprent mode with trunking, What you should do is create multicontext transparent mode and then bridge the VLANs

regards

harish.

Julio Carvajal
VIP Alumni
VIP Alumni

Hello Ananth,

You can make this happen using the firewall on multiple context or using the new feature ( bride groups)

Here are the links for both options:

http://www.cisco.com/en/US/docs/security/asa/asa70/configuration/guide/examples.html#wp1010043

http://blog.alwaysthenetwork.com/tutorials/asa-bridge-groups/

Any other question..Sure.. Just remember to rate all of my posts

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Hello Julio,

I think you are refering to the below link for the second option isnt it?

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/interface_complete_transparent.pdf

Harish.

Thank you very much Julio,

will check and update you.

a.bonthala
Level 1
Level 1

Dear all,

Thank you very much.

will check and update.

Hello ALL,

Looks like Im now plagued with a similiar issue. I have to congigure an ASA in transparent mode and am a little unfamiliar with this aspect of it from the 5520 level. Im am familiar with doing this on the 5505 As it is semeingly easier. I just dont know if I NEED sub interfaces referencing the vlans in question. Or if I need to just add the required inside/outside interfaces to a BVI and give it an IP address

Any assistance offered would be greatly appreciated.

Thank You,

Hameed

Review Cisco Networking for a $25 gift card