A network administrator is configuring an FTD in transparent mode. A bridge group is set up and an access policy has been set up to allow all IP traffic. Traffic is not passing through the FTD. What additional configuration is needed?

Question

Accepted Answer

C. An IP address must be assigned to the BVI. In transparent mode, the Cisco FTD acts as a Layer 2 bridge, but it requires a Bridge-Group Virtual Interface (BVI) to be configured with an IP address. The BVI serves as the Layer 3 interface for the bridge group, enabling management access to the FTD and allowing it to perform Layer 3 functions like ARP or responding to specific protocols within the transparent segment.

Answer

A. The security levels of the interfaces must be set. Security levels are typically used in routed firewall mode to control traffic between security zones, not the primary reason for traffic not passing in a transparent mode bridge group with an 'allow all' policy.

Answer

B. A default route must be added to the FTD. A default route is for Layer 3 routing decisions or management traffic, which is not required for Layer 2 transparent bridging itself.

Answer

D. A mac-access control list must be added to allow all MAC addresses. A MAC access control list is not inherently required to allow all IP traffic in transparent mode and would not be the cause of traffic not passing unless specific MAC filtering was configured to block it.

A network administrator is configuring an FTD in transparent mode. A bridge group is set up and an access policy has been set up to allow all IP traffic. Traffic is not passing through the FTD. What a

Question

Options

How the community answered

Why each option

Topics

Community Discussion