The Cisco ASA supports two deployment models: routed mode and transparent mode.
The mode determines how the firewall will forward traffic and what features will be available.
In routed mode, the ASA operates as a Layer 3 device, acting as a routed hop between different IP networks. Traffic forwarding is based on the destination IP addresses. The ASA can use either static or dynamic routing.
In transparent mode, the ASA operates as a Layer 2 device, acting as a transparent bridge or “bump in the wire”. Instead of routing packets between different IP networks, it bridges traffic between interfaces within the bridge group (same IP subnet). Traffic forwarding is based on the destination MAC addresses.
Comments
Post a Comment