Firewall in single vlan

[shashikant.prabhakar]

Hello,

I have a network provided from Datacenter.

I doubt this design will work but before pointing finger on Datacenter, I want to confirm.

Design :

[Internet] ---> [Switch] ---> [Cisco ASA] ---> [Server]

Firewall : Cisco ASA 7.2 (4)

They configured single Vlan1 in which they included all 8 ports from eth0 to eth7. Out of which eth0 is connected to Server and eth1 is connected to Switch, all other are shutdown.

But confusing thing is both are in same vlan with ip address x.x.x.190.

Server has ip address of x.x.x.186

Gateway for server and firewall, both has x.x.x.185 (I suppose that this device is connected to same switch as of Cisco ASA).

Now, we want to configure ACLs on firewall, please let me know if above scenario is possible ?

I doubt that atlesat seperate interface should be there to configure firewall like inside and outside.

Thanks,

Shashi.

[varrao]

Hi Shashi,

THe datacentre might be configuring the firewall in transparent mode, as per you description. Please go through the document below to understand the concept of transparent firewall:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008089f467.shtml

Hope this helps.

Thanks,

Varun