How is IRB on next-generation firewall running in transparent mode supported?

Question

Options

• AIPv4 routes must be configured on the physical interface.
• BIRB requires an external switch.
• CIPv4 routes must be configured on the BVI.
• DIRB is supported only in routed mode.

• A
  2% (1)
• B
  2% (1)
• C
  90% (47)
• D
  6% (3)

Explanation

IRB (Integrated Routing and Bridging) on a Cisco next-generation firewall in transparent mode uses a Bridge Virtual Interface (BVI) as the routed Layer 3 interface for a bridge group. The BVI is a logical interface associated with the bridge domain, and it is on this BVI that IPv4 (and IPv6) routes must be configured - not on the physical member interfaces. This allows the firewall to both bridge traffic between interfaces in the same bridge group and route traffic between different bridge groups or to external networks via the BVI. Option A is incorrect because routes go on the BVI, not physical interfaces. Option B is incorrect as an external switch is not required. Option D is incorrect because IRB is specifically a transparent-mode feature, not limited to routed mode.

No community discussion yet for this question.