300-710 · Question #299
What is a limitation to consider when running a dynamic routing protocol on a Cisco Secure Firewall Threat Defense device in IRB mode?
The correct answer is B. Only nonbridge interfaces are supported. When running dynamic routing protocols on a Cisco Secure Firewall Threat Defense device in Integrated Routing and Bridging (IRB) mode, routing protocols are only supported on non-bridge (routed) interfaces.
Question
What is a limitation to consider when running a dynamic routing protocol on a Cisco Secure Firewall Threat Defense device in IRB mode?
Options
- AOnly link-state routing protocols are supported.
- BOnly nonbridge interfaces are supported.
- COnly EtherChannel interfaces are supported.
- DOnly distance vector routing protocols are supported.
How the community answered
(26 responses)- A4% (1)
- B92% (24)
- D4% (1)
Why each option
When running dynamic routing protocols on a Cisco Secure Firewall Threat Defense device in Integrated Routing and Bridging (IRB) mode, routing protocols are only supported on non-bridge (routed) interfaces.
Cisco FTD supports both link-state (OSPF) and distance-vector (EIGRP, RIP, BGP) routing protocols.
In IRB mode, while a Bridge Virtual Interface (BVI) itself can participate in routing, the individual physical or logical interfaces assigned to a bridge group are Layer 2 and cannot directly run dynamic routing protocols. Dynamic routing protocols require Layer 3 routed interfaces for adjacencies and route exchanges.
Cisco FTD supports dynamic routing protocols on various interface types, not exclusively EtherChannel interfaces.
Cisco FTD supports both distance-vector (EIGRP, RIP, BGP) and link-state (OSPF) routing protocols.
Concept tested: FTD IRB mode dynamic routing limitations
Source: https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-v70/interface_basics_for_ftd.html
Topics
Community Discussion
No community discussion yet for this question.