A Cisco FTD device is running in transparent firewall mode with a VTEP bridge group member ingress interface. What must be considered by an engineer tasked with specifying a destination MAC address…

Question

Options

• AThe destination MAC address is optional if a VLAN ID value is entered
• BOnly the UDP packet type is supported
• CThe output format option for the packet logs unavailable
• DThe VLAN ID and destination MAC address are optional

• A
  75% (30)
• B
  15% (6)
• C
  3% (1)
• D
  8% (3)

Explanation

When running a packet tracer on a Cisco FTD device operating in transparent firewall mode with a VTEP (Virtual Tunnel Endpoint) bridge group member as the ingress interface, the destination MAC address is required for most transparent mode scenarios. However, if a VLAN ID value is provided, the destination MAC address becomes optional. This is because the VLAN tag provides enough encapsulation context for the packet tracer to proceed. Option B is incorrect because both TCP and UDP packets are supported. Option C is incorrect because output format options are available. Option D is incorrect because the VLAN ID alone can make the MAC optional, but both are not simultaneously optional.

No community discussion yet for this question.