Guidelines and Limitations for Interfaces
Inline Sets for Firewall Threat Defense
-
Supported for physical interfaces (both regular and breakout ports) and EtherChannels.
-
Link state propagation is supported.
-
Do not enable Hardware Bypass and link state propagation for the same inline set.
Hardware Bypass
-
Supported for the Firewall Threat Defense; you can use them as regular interfaces for the ASA.
-
The Firewall Threat Defense only supports Hardware Bypass with inline sets.
-
Hardware Bypass-capable interfaces cannot be configured for breakout ports.
-
You cannot include Hardware Bypass interfaces in an EtherChannel and use them for Hardware Bypass; you can use them as regular interfaces in an EtherChannel.
-
Hardware Bypass is not supported with High Availability.
-
Do not enable Hardware Bypass and link state propagation for the same inline set.
Default MAC Addresses
Default MAC address assignments depend on the type of interface.
-
Physical interfaces—The physical interface uses the burned-in MAC address.
-
EtherChannels—For an EtherChannel, all interfaces that are part of the channel group share the same MAC address. This feature makes the EtherChannel transparent to network applications and users, because they only see the one logical connection; they have no knowledge of the individual links. The port-channel interface uses a unique MAC address from a pool; interface membership does not affect the MAC address.