300-710 · Question #288
An engineer plans to reconfigure an existing Cisco FTD from transparent mode to routed mode. Which additional action must be taken to maintain communication between the two network segments?
The correct answer is B. Update the IP addressing so that each segment is a unique IP subnet. When converting a Cisco FTD from transparent to routed mode, the IP addressing of the connected network segments must be updated to ensure each segment resides in a unique IP subnet to facilitate routing.
Question
An engineer plans to reconfigure an existing Cisco FTD from transparent mode to routed mode. Which additional action must be taken to maintain communication between the two network segments?
Options
- AAssign a unique VLAN ID for the interface in each segment.
- BUpdate the IP addressing so that each segment is a unique IP subnet.
- CConfigure a NAT rule so that traffic between the segments is exempt from NAT.
- DDeploy inbound ACLs on each interface to allow traffic between the segments.
How the community answered
(16 responses)- A6% (1)
- B88% (14)
- D6% (1)
Why each option
When converting a Cisco FTD from transparent to routed mode, the IP addressing of the connected network segments must be updated to ensure each segment resides in a unique IP subnet to facilitate routing.
Assigning unique VLAN IDs is good practice but doesn't address the fundamental requirement of IP subnets for routing; VLANs are layer 2 segmentation.
In transparent mode, the FTD acts as a bump-in-the-wire and interfaces are in the same broadcast domain and often the same IP subnet. When converting to routed mode, the FTD acts as a router, and each interface must belong to a different IP subnet to allow for proper routing between segments. This is a fundamental requirement for a routed device.
While NAT might be used for other purposes, it's not a direct requirement to "maintain communication" between segments when transitioning to routed mode; proper routing between distinct subnets is the primary concern.
Deploying inbound ACLs is a security measure to control traffic, but the primary enabler for communication between different routed segments is correct IP addressing and routing, not just ACLs. ACLs would be applied after routing is established.
Concept tested: FTD transparent to routed mode conversion requirements
Source: https://www.cisco.com/c/en/us/td/docs/security/firepower/621/configuration/guide/fpmc-config-guide-v621/fpmc-interface.html#concept_45C0B310086E45E7A23C2A961208D169
Topics
Community Discussion
No community discussion yet for this question.