Difference between Routed and Transperant mode on firewall

Hi,
Can any one explain about Routed and transperant mode on Cisco ASA in a simple words..

To use an example from the University of Wisconsin-Madison, we have about 220 departments, centers, institutes, and other administrative units on our campus.  Some are large and complicated, have their own IT staff, run their own delegated DNS, have multiple sites, and tend to run their own firewalls in routed mode.  This will typically be the case for anyone who is using a lot of vlans to segregate traffic for security or performance reasons.   Converse, some units are small, single-site, have only one subnet, and lack IT staff.  The campus offers them virtual firewall contexts on shared central equipment, and runs those in transparent mode.  In transparent mode the routers distinguish the two sides of the firewall using different vlan tags.  In routed mode, each firewall interface is on its own distinct subnet as well as vlan, and the uplink outside interface needs a distinct transit subnet of its own, usually something between a v4 /29 - /30.
The choices are not mutual exclusive - I do it both ways on different parts of my network.  Mostly of my traffic is in routed mode on my own gear, but I have one segregated sub-unit using transparent mode on the shared campus gear instead.  Even on a home network you might be doing it both ways; e.g. if you have a broadband DLS or cable modem plus your own separate wifi router, the modem will typically run in transparent mode (bridging traffic), while the wifi+ethernet device will typically run in routed mode to provide NAT44 service.  Cisco ASA gear lets you choose.
-- Jim Leinweber, WI State Lab of Hygiene

Similar Messages

  • What's the difference between Routing and Service Callout in ALSB?

    I am puzzled by that.
    what's the difference between them.
    Or what's the situation should use Routing, and that of service callout?

    There is little difference between routing and service callout.
    Routing is symbolizes the transition of request thread to a response thread starts. (in OSB every invocation of proxy is undertaken by different request and response threads ). So by this definition, there can be only one route node in a pipeline.
    Service call out is also used for similar actions as route node , but in pipeline. So service callout can be either in request pipeline (request thread) or in response pipeline (response thread ) . So in a proxy you can have multiple ServiceCallouts but only one route node.
    There are some other slight differences.
    Manoj

  • Difference between 3G and Dual Mode?

    When I go through cellular network options, I get 3 options as GSM, 3G and Dual Mode. What is the difference between the Dual Mode and 3G, and what exactly is this Dual Mode? When should I choose that over 3G?
    Solved!
    Go to Solution.

    Dual mode means that the phone will connect to either 2G (GSM) or 3G connections. It will try for a 3G connection if it's strong enough, otherwise, it will go to a 2G connection.
    The difference between 3G and dual mode, is in 3G mode, the phone will only try to connect to a 3G connection.
    In most cases, dual would be better. If you are in an area will really strong and constitent 3G, then it's probably better to be on 3G.

  • Difference between routing and super routing

    Dear Members,
    I have basic question , can some one point out difference between, routing and super routing.
    also provide transaction code for creating super routing.
    Thanks
    SP

    also go through documents created in forum for basic VC setup & super routing.
    http://scn.sap.com/docs/DOC-25224
    Introduction to Variant Configuration with an example model of Routing
    It may help you developing understanding on basic's of variant configuration, super routing is one part of it.
    Thanks
    Ritesh

  • Specific differences between AP and bridge modes?

    I've RTFM'd everywhere but cannot find anything definitive regarding the differences between AP+client versus bridge+bridge modes.
    Presume you have a pair of AP1200's. First test case: One is in AP mode and the other is in WGB mode. Second test case: One is in root-bridge mode and the other is in non-root-bridge mode.
    In both cases traffic will pass bidirectionally from one Ethernet port to the other. What, then, are the technical differences between these two situations? Do the "bridges" place less load on the AP1200's CPU? Does AP-based operation yield more diagnostic data? What are the advantages and disadvantages of each mode?
    I can't find anything that digs into the details. Any help appreciated. Thanks!

    Thanks for your response. A few comments, and then a question:
    * Looks to the AP just like a standard client, so it interoperates with all APs
    What does? A 1200 in WGB mode? If so, then yes it looks like a standard client to the AP but Cisco explicitly states it will only associate with other Cisco AP's. It is not compatible with "all APs".
    If you mean a non-root-bridge looks like a standard client to an AP, that's true but the AP must be in "AP with wireless clients" mode which is not one of the test cases I was asking about.
    * No configuration required
    Of the WGB? Mine need configuration: SSID, encryption keys, etc. It's just like setting it up as an AP except for the mode you select.
    Of a (non-)root-bridge? Mine have needed configuration in that mode, too. Same as above.
    Not sure what you mean by "no configuration required".
    # Disadvantages:
    * Supports only a single wired client
    Nope, in WGB mode pre-1200 units supported up to eight wired devices. 1200's and later support up to 250 clients. Cisco docs are clear on this.
    In bridge mode I'm not aware of any wired client limits. The device is simply passing traffic between the two interfaces.
    * WGB itself is not manageable
    Not sure what you mean by "not managable".
    Back to my question: What is the difference between AP+client mode vs. root-bridge+non-root-bridge mode? Does the AP+client mode make more decisions about traffic routing or prioritization, while bridge-based operation is less "intelligent"? Something else?
    My tests show no discernable difference in throughput, even with multiple clients/nonroot bridges. When multiple users consume bandwidth simultaneously, it is shared among them just as you'd expect.
    So... what ARE the differences, as far as the decisions IOS is making, between the different modes?
    Thanks!

  • Difference between routing and rate routing

    frndz,
    Pls tell me the difference routing and rate routing.
    regards,
    Srini

    Dear ,
    [Rate Routing:]
    1.A routing for whose operations the production quantity and a fixed duration has been defined. Thus the production rate is also defined.
    2.Rate routings are used when you plan on a quantity basis, for example in repetitive manufacturing.
    3.A rate routing has the same structure as a routing. You can assign a rate routing to a material to be produced. It can have prallel sequences.
    [Routing]
    1.Routings are used directly in production orders for a material.
    2.A routing can be used without restrictions. Some functions from other task list types such as rate routings and inspection plans are also available in routings.
    3.As well as a standard sequence a routing can also have parallel and alternative sequences. You can assign a routing to a material to be produced.

  • Difference between bridge and local mode with wlc 5508

    Hello,
    Now i have wlc5508 with few ap 11xx 12xx in local mode. All work correct. I will have to add few ap1552 in bridge mode ( i have to wait for wlc upgrade to change ap1552 to local mode). My question is that all ( local and bridge mode) will work correct together for my clients: rfid readers, laptop, computer in a,b,g,n mode ? What about roaming  and other feature ?
    thanks for help
    Peter

    If you plan on not doing MESH, then you set these 1552's in local mode and they will perform the same tasks as any other AP's in local mode.  When you want to do MESH, then that is when bridge mode comes into play and you have to define your RAP's and MAP's.
    Roaming, clients devices, doesn't matter if your using local or bridge.  roaming depends on your device and coverage and rfid, also depends on triangulation with the coverage you have now.
    Thanks,
    Scott
    Help out other by using the rating system and marking answered questions as "Answered"

  • What is the difference between Routing and Call OSB regarding preformance?

    Hi excuse my ignorance, I am new to OSB and would like to know the difference in the performance of a service using the Service Callout or Routting, which would be the fastest to run?
    would like to know this to know what the best to use if I have a situation that you can use either one.
    Thanks!

    service call out .. you call a service in a SYNCHRONOUS way (pipeline blocks and waits for service response).
    we cannot use request-only wsdl operation through service callout.It is single threaded.
    route ... it's the last node of the proxy, it's not in the pipeline, you pass all processing to another (business or proxy) service . Route node can be seen as an action which defines where a Request thread stops and Response thread begins, in addition to what ever it does. It is know that by-design, request and response pipelines of a OSB proxy will be in different threads.
    route node can be (request-response and request only)
    you can have multiple ServiceCallouts but only one route node.
    Service callout under high load can cause stuck thread issues, so it has to be used wisely depending upon your requirement.
    Hope this helps.
    Regards,
    Karan

  • Why there is a difference between Router and PIX ACL

    Hi,
    I have a very basic question about the differences beween ACL behaviour in PIX and Router.
    In Router if we put an extended acl entry and want to remove an mid entry then either we have to clear the entire ACL or remove the entries all the below.
    Whereas in case of PIX we can remove any of the entry.
    Why this difference is there.
    Would appreciate your quick answers.
    Thanks
    Irshad

    The PIX OS is designed such a way. Anyway, even in routers you can remove a mid entry by configuring named access-lists. You need not clear the entire ACL in this case.
    ip access-list extended ROUTER-ACL
    permit ip host x.x.x.x host y.y.y.y any

  • What is the difference between router and network name ?

    Hi ... I changed the name of my router in the Airport utility and thought that the network would be changed accordingly.  What is the differnce between the 2 ?

    I changed the name of my router in the Airport utility and thought that the network would be changed accordingly.  What is the differnce between the 2 ?
    The name of the router would be the "Base Station" or "device" name. It might be something like RL AirPort Extreme
    The name of the wireless network (technically called the SSID) is separate matter. It might be something like RL Wireless, for example.
    If you can post back to let us know what version of AirPort Utility you are using, we can provide you with the steps to change either the device name or wireless network, or both.
    In order to prevent confusion, you should have a separate device name and a separate wireless network name.
    If you are not sure which version of AirPort Utility that you have, click on the AirPort Utility menu in the upper left corner of the screen and then click About AirPort Utility to see the version number.

  • What's the difference between routing and rate routing

    As we all know that routing normally used in discrete manufacture, and  rate routing used in REM, one of my client, the just use routing for REM instead of rate routing, are there any gurus can tell me some detail information about them?
    Thanks!
    Eric

    Hi,
    对于routing和rate routing来说，区别并不是很明显，但从流程的角度来说，routing适用于所有的离散型制造业，而rate routing适用于重复制造业！
    如果非要找出差别的话，就是routing可以定义并行序和可选序，而且rate routing只能定义并行序！
    具体的使用差别可以参考如下链接：
    http://help.sap.com/saphelp_45b/helpdata/en/03/bb1d0ca6e811d189010000e8323492/frameset.htm

  • Strange Difference between runtime and development mode.

    Hello everyone,
    I have created an add-on that adds three items to the menu which launch three different forms. When SBO is loaded and I run the code from the development environment (VB6) it works perfectly, i.e. click on one of the three new menu items and the appropriate form loads.
    When I compile and register it as an add on SBO loads it correctly and it customizes the menu. However, when I click on any of the three new menu items it now gives an error message:
    Run Time Error (91)
    Object variable or With Block variable not set.
    And then blows away the add on.
    I tried trapping the error in the "Menu_Event" and got nothing. The error occurred as before with no evidence that it had been caught by my trap.
    This same behavior occurs on both my development system and on the customer's production system! Both systems are 6.5 sp1 Ef 07.
    Has anyone else had this problem? Any help appreciated.
    Mel

    Hi Mel,
    I heard of a similar problem - just that the menu event did not get fired.
    Do you use event filters?
    Did you add the menu event to the filters collection?
    Set oFilter = oFilters.Add(et_MENU_CLICK)
    Though apparently this should have been mandatory, in case you use filters, from the beginning of 6.5, what I heard from another partner does not match to this information.
    HTH,
    Frank

  • Difference between automatic and non-automatic page attributes

    Hi,
    Can anyone tell me difference between automatic page attributes and non-automatic page attributes?
    and also difference between stateful and stateless mode with examples?
    Thanks
    Narendra

    Hi Mullapudi,
    If you mark a page attribute as u2018automaticu2019 (auto in the system), the attribute automatically gets its values via the calling URL or
    via the navigation process from other pages.
    This kind of attribute only has to be declared for one page.
    It is identified by its name equivalence.
    If another page uses a parameter with the same name,
    at runtime that parameter automatically
    gets the same values as the attribute.
    Non-automatic page attributes
    If you flag a page attribute as non-automatic, the attribute gets its values from the class attribute.
    The visibility of page attributes when parameters are transferred between BSP pages depends on whether the navigation is explicit or implicit.
    Explicit navigation
    For example, if navigation->goto_page(page.htm)
    Implicit navigation
    With implicit navigation, the page attributes are transferred automatically from OnInputProcessing to OnInitialization, both in stateful and stateless mode.
    The auto page attributes are refilled by the request, both in stateful and stateless mode.
    Reward if Useful...
    Regards,
    Anita. B

  • Difference between Reporting Services Sharepoint Mode and Reporting Services Add In for Sharepoint 2013

    Hi, We are building company site with Sharepoint 2013 Enterprise Edition and were wondering what is the difference between Reporting Services Sharepoint Mode and Reporting Services Add In for Sharepoint 2013? What are the roles/purposes of each one? What
    happens if only Reporting Services Sharepoint Mode  installed or vise versa.
    Thank you in advance

    Reporting Services in SharePoint mode is a service for displaying, managing, and creating SSRS reports within SharePoint. The addin is a pre-req for SharePoint that is used to display reports and is required for Reporting Services in Native or SharePoint
    mode, but does not by itself do anything.
    Trevor Seward
    Follow or contact me at...
    &nbsp&nbsp
    This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

  • Difference between trunc and mod

    hi,
    what is the difference between trunc and mod operator
    can any one explain
    thanks in advance

    If you are going to ask for the difference between every pair of unrelated functions we could be here for some time. What is the difference between UPPER and CEIL? etc
    TRUNC and MOD are both clearly documented in the SQL Reference.

Maybe you are looking for