Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 556
  • Last Modified:

Transparent mode on a PIX

How do I set up transparent mode on both the command line and PDM
0
johnc0817
Asked:
johnc0817
  • 2
1 Solution
 
billwhartonCommented:
Firstly, you can only run transparent mode in version 7. Hence, make sure that's what you are running

In transparent mode the PIX does not have IP addresses assigned to its interfaces. Instead it acts as a Layer 2 bridge that maintains a MAC address table and makes forwarding decisions based on that. The use of full extended IP access lists is still available and the firewall can inspect IP activity at any layer. In this mode of operation the PIX is often referred to as a "bump in the wire" or "stealth firewall". There are other significant differences as to how transparent mode operates in comparison to routed mode:

    *      Only two interfaces are supportedinside and outside
    *      NAT is not supported or required since the PIX is no longer a hop

Make sure you read this overview of the mode too here:
http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/fwmode.html#wp1201980

To set up transparent mode on the firewall, either do firewall transparent or mode transparent from the configuration mode

You can follow this example to create a configuration:
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008089f467.shtml



0
 
johnc0817Author Commented:
Can I set this up in PDM or must I use command line?
0
 
billwhartonCommented:
I don't know what version of PDM you are running but all configuration docs are located here. check your 'show version' on the firewall and find out what PDM version you have. Then choose here

http://www.cisco.com/univercd/cc/td/doc/product/netsec/secmgmt/asdm/index.htm

There are some references to setting transparent mode at these links:
http://www.cisco.com/en/US/docs/security/asa/asa72/asdm52/user/guide/fwmode.html
http://www.cisco.com/en/US/docs/security/asa/asa72/asdm52/user/guide/startwiz.html
http://www.cisco.com/en/US/docs/security/asa/asa72/asdm52/user/guide/devadmin.html
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now