Thomas R Guerrette

US Patent:

20050114648, May 26, 2005

Filed:

Nov 24, 2003

Appl. No.:

10/721571

Inventors:

Kamesh Akundi - Karnataka, IN
Thomas Guerrette - Milpitas CA, US
John Gawf - Boulder CO, US
Rajan Goyal - San Jose CA, US

Assignee:

Cisco Technology, Inc., A corporation of California - San Jose CA

International Classification:

H04L009/00

US Classification:

713153000

Abstract:

Methods and devices are provided for implementing a dual mode firewall. Some implementations provide a firewall in a network device that acts as a bridge for layer traffic and acts as a router for layer traffic. In some implementations, a determination of whether to act as a bridge or a router for a packet is based on the configuration of the interface handling the packet. In some implementations, the network device inspects a destination of each packet to determine whether to act as a bridge or a router for that packet. The firewall screens both the layer and the layer traffic according to policies implemented in the firewall.