Cisco Cisco ASA 5550 Adaptive Security Appliance Guía Para Resolver Problemas
Introduction
This document answers a frequently asked question about the Cisco Adaptive Security Appliance (ASA).
Can a transparent mode ASA be configured without an IP
address on the bridge group?
address on the bridge group?
No, a transparent mode ASA must be configured with an IP address for each Layer 2 bridge group.
Besides using the IP for any traffic sourced from the ASA, the ASA must ARP or send out an ICMP message
in order to determine out of which interface the destination MAC resides (if the MAC address is not in the
ASA CAM table). Without a valid IP address assigned to the ASA that is in the same IP subnet as adjacent
devices, traffic might fail to pass through the transparent ASA since the ARP and ICMP process cannot
complete.
in order to determine out of which interface the destination MAC resides (if the MAC address is not in the
ASA CAM table). Without a valid IP address assigned to the ASA that is in the same IP subnet as adjacent
devices, traffic might fail to pass through the transparent ASA since the ARP and ICMP process cannot
complete.
Related Information
ASA FAQ: On ASA in multiple mode, why do I receive the Memory pool size is not valid Allowed
range from 2 to 512 error message when I issue the "url−block url−mempool 10240" command?
range from 2 to 512 error message when I issue the "url−block url−mempool 10240" command?
•
ASA FAQ: Can I configure more static NAT entries than the maximum number of concurrent
connections for the given platform?
connections for the given platform?
•
ASA 5500 Series Adaptive Security Appliance FAQ
•
Updated: Jul 23, 2013
Document ID: 116407