Cisco Cisco Firepower Management Center 2000 Installationsanleitung

Seite von 50
 
5-2
Cisco NGIPS for Blue Coat X-Series Installation and Configuration Guide
 
Chapter 5      Managing Cisco NGIPS for Blue Coat X-Series 
  Editing Load-Balanced VAP Groups
where 
vap_group_name
 is the name of the VAP group and 
vap_1
 is the first VAP in the VAP group, and 
vap_2
 is the second VAP in the same VAP group, separated by a space. For example, to restrict load 
balancing to the existing two VAPs on the 
ABC
 VAP group, enter the following commands separately and 
in sequence:
CBS# configure vap
-
group ABC
CBS(config-vap-grp)# available-vap-list 1 2
Step 2
Increase the 
vap-count
 and the 
max-load-count
 by entering the following commands separately and in 
sequence:
CBS(config
-
vap
-
grp)# vap
-
count vap-count-quantity
CBS(config
-
vap
-
grp)# max
-
load
-
count max-load-quantity
CBS(config
-
vap
-
grp)# end
where 
vap-count-quantity
 
is the total number of VAPs you want in the VAP group and 
max-load-quantity
 
is the maximum number of VAPs you want in the VAP group. For example, if you 
have two VAPs in the 
ABC
 load-balanced group and want to add two new VAPs, you can increase the 
vap-count
 and the 
max-load-count
 to 
4
 by entering the following commands separately and in 
sequence:
CBS(config
-
vap
-
grp)# vap
-
count 4
CBS(config
-
vapvgrp)# max
-
load
-
count 4
CBS(config
-
vap
-
grp)# end
Step 3
After the new VAPs boot, use the 
application-update
 command to install Cisco NGIPS for Blue Coat 
X-Series:
application
-
update vap
-
group vap_group_name
where 
vap_group_name
 is the name of the VAP group. For example, you can update the VAP group named 
ABC
 by entering the following command:
application
-
update vap
-
group ABC
Step 4
Provide the management interface, sensing interfaces, and management host IP address for the new 
VAPs.
Step 5
Reload the new VAPs in the VAP group by entering the following command:
CBS# reload vap
-
group vap_group_name vap_3 vap_4
where 
v
ap_group_name
 is the name of the VAP group, and 
vap_3
 
and 
vap_4
 are the number that identify 
the two new VAPs. For example, add the two new VAPs to the VAP group named 
ABC
 by entering the 
following command:
CBS# reload vap
-
group ABC 3 4
Step 6
Register Cisco NGIPS for Blue Coat X-Series with the Defense Center and create interfaces. For more 
information, see 
Step 7
Push the appropriate policies to the new VAPs using the user interface on the Defense Center that 
manages the device. See the FireSIGHT System User Guide for more information.
Step 8
Set the 
available-vap-list
 back to include all VAPs by entering the following command:
CBS# configure vap
-
group vap_group_name
 
available-vap-
list vap_1 vap_2 vap_3 vap_3
where 
vap_group_name
 is the name of the VAP group and 
vap_1
,
 
vap_2
vap_3
 
and
 
vap_4
 
are the 
numbers that identify the VAPs. For example:
CBS# configure vap-group ABC
 
available-vap-list 1 2 3 4
Editing Load-Balanced VAP Groups
You may want to add or remove a VAP from a load-balanced VAP group.