04-03-2012 11:00 AM
How do you physically configure a network tap on the Ironport? I'm not sure what they are referring to... I'm hoping they are not talking about a pass through fromt he inside firewall to the switch.
Solved! Go to Solution.
04-03-2012 11:24 AM
In order to make my example clear, I'm going to make the following assumptions:
You're talking about the Layer 4 Traffice Monitor (aka L4TM)
Firewall inside interface, the WSA P1 interface and the WSA T1 interface plugged into the same swtich, on the same VLAN.
Firewall inside on gig1/1
WSA P1 on gig1/5
WSA T1 on gig1/10
(Optional WSA T2 on gig1/11)
If you feel that one interface on the WSA will get overloaded, set the L4TM config in Network/Interfaces for simplex. Then connect the WSA T2 port to the swtich (say gig1/11), and do an egress span from gig1/1 to gig1/10 and ingress span from gig1/1 to gig1/11.
If its all connected to a HUB, the use DUPLEX on the WSA L4TM config and just hook up T1...
Or you can use an actual tap, that you put in-line like this: http://www.netoptics.com/products/network-taps/101001000baset-tap and hook that up to the T1/T2 ports as appropriate.
Hope that helps!
Ken
04-03-2012 11:24 AM
In order to make my example clear, I'm going to make the following assumptions:
You're talking about the Layer 4 Traffice Monitor (aka L4TM)
Firewall inside interface, the WSA P1 interface and the WSA T1 interface plugged into the same swtich, on the same VLAN.
Firewall inside on gig1/1
WSA P1 on gig1/5
WSA T1 on gig1/10
(Optional WSA T2 on gig1/11)
If you feel that one interface on the WSA will get overloaded, set the L4TM config in Network/Interfaces for simplex. Then connect the WSA T2 port to the swtich (say gig1/11), and do an egress span from gig1/1 to gig1/10 and ingress span from gig1/1 to gig1/11.
If its all connected to a HUB, the use DUPLEX on the WSA L4TM config and just hook up T1...
Or you can use an actual tap, that you put in-line like this: http://www.netoptics.com/products/network-taps/101001000baset-tap and hook that up to the T1/T2 ports as appropriate.
Hope that helps!
Ken
04-03-2012 08:11 PM
OK. so it sounds like the network tap is an efficient piece of hardware to deliver packets. Thanks
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide