300-710 · Question #266
An organization is installing a new Cisco FTD appliance in the network. An engineer is tasked with configuring access between two network segments within the same IP subnet. Which step is needed to…
The correct answer is A. Assign an IP address to the Bridge Virtual Interface. To enable access between two network segments within the same IP subnet on a new Cisco FTD appliance, an IP address must be assigned to the Bridge Virtual Interface (BVI).
Question
An organization is installing a new Cisco FTD appliance in the network. An engineer is tasked with configuring access between two network segments within the same IP subnet. Which step is needed to accomplish this task?
Options
- AAssign an IP address to the Bridge Virtual Interface.
- BPermit BPDU packets to prevent loops.
- CSpecify a name for the bridge group.
- DAdd a separate bridge group for each segment.
How the community answered
(26 responses)- A92% (24)
- B4% (1)
- C4% (1)
Why each option
To enable access between two network segments within the same IP subnet on a new Cisco FTD appliance, an IP address must be assigned to the Bridge Virtual Interface (BVI).
In a transparent mode Cisco FTD deployment, the Bridge Virtual Interface (BVI) serves as the Layer 3 interface for a bridge group, and assigning it an IP address is essential for management access and for the FTD to participate in Layer 3 functions for the bridged segments.
Permitting BPDU packets is related to spanning tree protocol and loop prevention, but it is not the primary step for enabling basic Layer 3 access between segments within the same subnet on a transparent firewall.
Concept tested: Cisco FTD transparent mode bridging
Source: https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-70/configure_interface_settings.html
Topics
Community Discussion
No community discussion yet for this question.