Nokia Network Voyager, Reference Manual

Page: 434 / 700

7
Configuring Traffic Management
436 Voyager Reference Guide
all interfaces of the transparent mode group if the egress interface is not found
in the forwarding table.
If there are any VLAN interfaces among the interfaces in the transparent
mode group, the link header of a bridged packet is modified to have the proper
format for the egress interface.
Neighbor Learning
Neighbor learning is the process of associating a MAC address with an
interface whenever a packet is received with an unknown source MAC
address. This association is called a neighbor control block. The neighbor
control block is deleted from the address table after a period of inactivity (age
time out). The age time-out is reset to this initial value for the neighbor
control block on receiving any packet from that neighbor.
Firewall Support
Packet processing for a firewall consists of ingress and egress processing.
This applies only to IP packets; ARP packets are never delivered to the
firewall.
Egress processing occurs when a packet returns from the firewall’s ingress
filtering, the packet is delivered to the firewall again for egress filtering. The
packet is delivered with the interface index of the egress interface. If it is a
link multicast packet, a copy of the packet is made for each interface of the
transparent mode group, except the received interface. It is then delivered to
the firewall with the associated interface index.
For more information on how to configure a firewall see the Check Point
documentation included with your system.
Note
Network Address Translation (NAT) is not supported in transparent mode.
Transparent mode does support implicit “NATing” of the packet’s
destination IP address to a local IP address to deliver packets to the
security server on the local protocol stack. It does this by performing a
route lookup for the packet’s destination IP address to determine whether