An engineer wants to change an existing transparent Cisco FTD to routed mode. The device controls traffic between two network segments. Which action is mandatory to allow hosts to reestablish communication between these two segments after the change?

Question

Accepted Answer

D. Implement non-overlapping IP subnets on each segment. A transparent mode FTD operates at Layer 2 within a single subnet, while a routed mode FTD operates at Layer 3, acting as a router between distinct subnets. To facilitate routing between segments in routed mode, each interface connected to a segment must be configured with an IP address belonging to a unique, non-overlapping IP subnet.

Answer

A. Remove the existing dynamic routing protocol settings. Removing dynamic routing protocol settings is not an initial mandatory step for establishing basic connectivity; routing protocols would be configured after the interfaces are set up in routed mode.

Answer

B. Configure multiple BVIs to route between segments. Bridge-Group Virtual Interfaces (BVIs) are primarily used in transparent mode for Layer 3 services; in routed mode, physical or subinterfaces are configured with IP addresses for routing between segments.

Answer

C. Assign unique VLAN IDs to each firewall interface. Assigning unique VLAN IDs is necessary if using subinterfaces on a single physical port to create multiple segments, but the fundamental requirement for routed mode is distinct IP subnets for routing functionality.

An engineer wants to change an existing transparent Cisco FTD to routed mode. The device controls traffic between two network segments. Which action is mandatory to allow hosts to reestablish…

Question

Options

How the community answered

Why each option

Topics

Community Discussion