Hi my name is she had from Teach Epix.
Welcome you all to Cisco firewalls course.
In this video we will discuss the topic of the Cisco is a deployment notes by the end of this video.
We will be able to understand what is the difference between different Cisco deployment modes and when
we use each one of them.
So let's start Cisco is a has two main modes the first modes called the routing mode which is actually
like a routing from the firewall acts exactly like at a layer 3 routers OK.
So that means it can be a gateway or a hop to your internet.
It can perform any matching functionalities it can do any routing using known routing protocols like
or SPF or Rep exactly like a router this mode only functions in a single context mode.
If you remember in the previous video we discussed what we mean but by context the firewall the physical
firewall can be divided into visual virtual appliances called context.
So if you divide the firewall to different visual appliances or visual context you cannot use this mode
which is the layer 3 droughts.
It has to be a single context mode or just a single physical appliance.
All right so as I said it acts exactly like a router interfaces the IP addresses and everything OK.
The second mode is what we call a transparent mode which is actually exactly like a layer to switch.
All right.
So the ACA actually has a built in switch inside it so it can act as a layer to switch or layer three
roundish OK.
When the firewall acts as a transparent mode or when it operates at the transparent both both sides
of the firewall.
Which means if you have an inside and outside interface they are both connected to the same subnet right.
So there is no more inside and outside interfaces both sides are connected to the same network.
We will see this in details in the next slide.
So don't worry.
All right.
So since the firewall in transparent mode acts as a layer to switch it uses Mac look up instead of IP
address exactly like a switch because the router operates at their three uses IP addressing for look
up by the switch uses MAC address.
OK whites call code transparent mode just because the firewall just functions without being seen which
means you cannot actually ping it you can't you cannot issue a ping command to the firewall because
when you ping you type an IP address since it's a layer to device it doesn't deal with IP addresses.
OK let's move forward.
Here you go.
The Cisco is a in routing mode as you can see in this figure.
Here is the inside network and here is the outside network connected to the Internet and the firewall
is in between it operates exactly like our outer we don't see in your outer here.
So from the inside to the outside.
It's only the firewall device.
There is no routing in between.
So it operates exactly like a relative.
It can perform nad it can.
It can do IP routing everything.
OK so here you go.
It's in between the inside and outside.
And here is of course the management interface connected to a management station all right the routing
mode in the firewall is the default mode actually.
So it's by default exists on the firewall if you want to change it to transparent mode you need to change
the configuration.
OK.
So by default that outed mode is active OK.
Also it can support a static routing so any routing function can be performed using the firewall in
or out month or right on the other side that transparent mode the firewall actually acts like a switch
as you can see in this figures.
Here is the inside one side here or one interface is considered an inside interface and also the other
interfaces the inside.
As I mentioned in the previous slide.
So in order to connect it from the inside to the outside or through the Internet you will need an additional
routing.
So there is a router here that takes you from the inside to the outside.
So the firewall here actually acts like a switch.
That's why you need our outer here to communicate with the outside world.
All right it is the note I mentioned here.
Acts as a switch.
OK.
So what are the characteristics of a firewall in transparent mode.
The general characteristics the ace a context the same network between its interfaces which means this
interface and the other interface the are in the same subnet OK they are both considered inside network.
All right the outside interface will be after the out OK.
Into transparent mode you cannot actually use any other interface rather than the inside and outside.
So if you have for example a DMZ interface like I I explained in a previous video you can have here
as many interfaces as you want.
If you have a third the interface here and you want to name it DMZ with a security level of 50 of course
you cannot do that in the transparent.
The firewall has to be in the routing mode.
All right.
Also as I mentioned it uses Mac lookups.
It uses MAC addresses to look up that neighbors or that connected devices exactly like a layer to switch
what are or what is the advantage of that is a in a transparent mode.
Actually the advantage is you just can insert any transparent firewall in your network without doing
any IP changes because it doesn't need an IP.
It's a layer to switch.
It's like a master switch.
So you don't have to do any changes.
You get rid of the hassle of changing the IP addressing scheme in your network that's all for this video
on the next feed you.
We will discuss Cisco firewall active.
Stand by Phil over which is actually very important topic.
I hope you enjoyed this video.
Thank you very much for watching.
See you in the next video.