1-25
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring the Transparent or Routed Firewall
Feature History for the Firewall Mode
Feature History for the Firewall Mode
Table 1-2 lists each feature change and the platform release in which it was implemented.
Table 1-2 Feature History for the Firewall Mode
Feature Name
Platform
Releases Feature Information
Transparent Firewall Mode 7.0(1) A transparent firewall is a Layer 2 firewall that acts like a
“bump in the wire,” or a “stealth firewall,” and is not seen as
a router hop to connected devices.
We introduced the following commands: firewall
transparent, show firewall.
ARP inspection 7.0(1) ARP inspection compares the MAC address, IP address, and
source interface in all ARP packets to static entries in the
ARP table.
We introduced the following commands: arp,
arp-inspection, and show arp-inspection.
MAC address table 7.0(1) Transparent firewall mode uses a MAC address table.
We introduced the following commands:
mac-address-table static, mac-address-table aging-time,
mac-learn disable, and show mac-address-table.
Transparent firewall bridge groups 8.4(1) If you do not want the overhead of security contexts, or want
to maximize your use of security contexts, you can group
interfaces together in a bridge group, and then configure
multiple bridge groups, one for each network. Bridge group
traffic is isolated from other bridge groups. You can
configure up to 8 bridge groups in single mode or per
context in multiple mode, with 4 interfaces maximum per
bridge group.
Note Although you can configure multiple bridge groups
on the ASA 5505, the restriction of 2 data interfaces
in transparent mode on the ASA 5505 means you
can only effectively use 1 bridge group.
We introduced the following commands: interface bvi,
bridge-group, show bridge-group.
Mixed firewall mode support in multiple
context mode
8.5(1)/9.0(1) You can set the firewall mode independently for each
security context in multiple context mode, so some can run
in transparent mode while others run in routed mode.
We modified the following command: firewall
transparent.
To Next Page
Loading...
Need help?
General
