problem:
I would like to add a transparent mode Firewall in between the L3-Gateway (default GW for all Networks) and the L2-FTTH network. reason: I need to firewall the communication from-to the FTTH network of this all subnets, so the traffic is not going back into the FTTH network, or only the traffic I would like to go back into the network
szenario:
default GW for all 3 Networks (FTTH)
(l3_gateway_MPLS-Device (BVI1) / 10.1.1.0/24, 10.2.1.0/24 sec, 10.3.1.0/24) - L2_Interface_VLAN 1
bridge groupe 1
* connects to *
inside Ethernet 1 (vlan1) - ASA_Transparent-Mode - outside Ethernet 2 (vlan2)
BVI 1
* connects to *
- L2_device_Interface_VLAN 2 - L2_ftth-network_Interface_VLAN3 (privat VLAN)
bridge groupe 2
* connects to *
Client Device connect via FTTH
problem:
ARP (mac-address-table) is only on the outside of the Firewall to see
no mac-address-table entry on the inside.
L2-traffic will not forward to the L3-gateway
I tryed to do a drawing...
thanks for your ideeas / help
