Cisco Cisco Web Security Appliance S670 User Guide
Chapter 25 Configuring Network Settings
Configuring Network Interfaces
25-4
Cisco IronPort AsyncOS 7.0 for Web User Guide
OL-23079-01
•
M1 and P1
•
M1, P1, and P2
•
P1 only
•
P1 and P2
You can enable the M1 and P1 ports during or after System Setup. However, you
can only enable the P2 port after System Setup in the web interface or using the
can only enable the P2 port after System Setup in the web interface or using the
ifconfig
CLI command.
The Web Proxy listens for client web requests on different network interfaces
depending on how you configure the Web Security appliance:
depending on how you configure the Web Security appliance:
•
M1. The Web Proxy listens for requests on this interface when it is not
configured to be restricted to appliance management services only.
configured to be restricted to appliance management services only.
•
P1. The Web Proxy listens for requests on this interface when it is enabled.
•
P2. By default, the Web Proxy does not listen for requests on this interface,
even when enabled. However, you can configure it to listen for requests on P2
using the
even when enabled. However, you can configure it to listen for requests on P2
using the
advancedproxyconfig > miscellaneous
CLI command.
To configure the appliance to use P2 as a second data interface:
Step 1
Configure the appliance to use P1 as the interface for data traffic. You can do this
during System Setup or after initial setup on the Network > Interfaces page.
during System Setup or after initial setup on the Network > Interfaces page.
Step 2
Enable P2 in the web interface (see
) or using the
ifconfig
CLI command.
Note
If the Management and Data interfaces are all configured, each must be
assigned IP addresses on different subnets.
assigned IP addresses on different subnets.
Step 3
In the web interface, go to the Network > Routes page. Change the Default Route
for data traffic to specify the next IP address that the P2 interface is connected to.
for data traffic to specify the next IP address that the P2 interface is connected to.
Note
If you enable P2 to listen for client requests using the
advancedproxyconfig >
miscellaneous
CLI command, you can choose whether to use P1 or P2 for
outgoing traffic. To use P1 for outgoing traffic, change the Default Route for data
traffic to specify the next IP address that the P1 interface is connected to.
traffic to specify the next IP address that the P1 interface is connected to.