Cisco Cisco Firepower Management Center 4000 Installationsanleitung

Seite von 50
 
3-10
Cisco NGIPS for Blue Coat X-Series Installation and Configuration Guide
 
Chapter 3      Installing Cisco NGIPS for Blue Coat X-Series 
  Preparing for the Installation
Repeat for each child circuit in for all inline interfaces.
Tip
Assign easy-to-remember device and circuit names, such as 
n1e1
.
Configuring Bridge-Mode Bridges
You create the path from one side of an inline interface through a VAP group to the other side of the 
inline interface by connecting child circuits in a bridge. The path must be a 
bridge-mode
 bridge 
configured in transparent mode. The series of commands, detailed in the following procedure, creates a 
bridge-mode
 bridge by connecting 
n1e1
 and 
n1e3
 on the previously created template circuit called 
bridge_one
:
CBS# configure bridge-mode bridge_one transparent
CBS(conf-bridge-mode)# circuit n1e1
CBS(conf-bridge-mode)# circuit n1e3
CBS(conf-bridge-mode)# end
CBS# 
To configure a bridge-mode bridge:
Step 1
Create a 
bridge-mode
 bridge by using a previously created template circuit and designate it for 
transparent operation. For example:
CBS# configure bridge-mode bridge_circuit_name transparent
where 
bridge_circuit_name
 
is the name of the template circuit. 
Step 2
Add the appropriate circuits to the 
bridge-mode
 bridge to join the interfaces on each side of the bridge 
by using the following commands:
CBS(conf-bridge-mode)# circuit circuit_name_1
CBS(conf-bridge-mode)# circuit circuit_name_2
CBS(conf-bridge-mode)# end
CBS# 
where 
circuit_name_1
 
and 
circuit_name_2
 
are the names of the circuits you want to use on the bridge. 
Step 3
Repeat steps 1 and 2 for each inline interface you want to configure.
Associating Physical Ports with Circuits
After you create management and sensing circuits, you must identify which physical ports are used by 
each circuit. In the example in this chapter:
  •
the 
n1e1
 circuit uses ethernet 1/1
  •
the 
n1e3
 circuit uses ethernet 1/3
  •
the 
n1e5
 circuit uses ethernet 1/5
  •
the 
mgmt
 circuit uses ethernet 1/10
The following series of commands, detailed in the following procedure, associates the circuits you 
created with the correct physical ports: 
CBS# configure interface ethernet 1/1
CBS(config-intf-gig)# logical n1e1
CBS(intf-gig-logical)# circuit n1e1
CBS(intf-gig-log-cct)# end
CBS# configure interface ethernet 1/3