Cisco Cisco Email Security Appliance C160 Guía Del Usuario
21-57
Cisco AsyncOS 8.0.2 for Email User Guide
Chapter 21 Configuring Routing and Delivery Features
Configuring Mail Gateways for all Hosted Domains Using Virtual Gateway™ Technology
Creating New IP Interfaces for Use with Virtual Gateways
After the IP addresses and hostnames have been established, the first step in configuring the Virtual
Gateway addresses is to create new IP interfaces with the IP/hostname pairs using the Network > IP
Interfaces page in the GUI or the
Gateway addresses is to create new IP interfaces with the IP/hostname pairs using the Network > IP
Interfaces page in the GUI or the
interfaceconfig
command in the CLI.
Once the IP interfaces have been configured, you have the option to combine multiple IP interfaces into
interface groups; these groups can then be assigned to specific Virtual Gateways addresses which the
system cycles through in a “round robin” fashion when delivering email.
interface groups; these groups can then be assigned to specific Virtual Gateways addresses which the
system cycles through in a “round robin” fashion when delivering email.
After creating the required IP interfaces, you have two options for setting up the Virtual Gateway
addresses and defining which email campaign will be sent from each IP interface or interface group:
addresses and defining which email campaign will be sent from each IP interface or interface group:
•
You can use the
altsrchost
command to map email from specific sender IP addresses or Envelope
Sender address information to a host IP interface (Virtual Gateway address) or interface group for
delivery.
delivery.
•
Using message filters, you can set up specific filters to deliver flagged messages using a specific
host IP interface (Virtual Gateway address) or interface group. See
host IP interface (Virtual Gateway address) or interface group. See
. (This method is more flexible and powerful than the one
above.)
For more information about creating IP interfaces, see the “Accessing the Appliance” appendix in the
Cisco IronPort AsyncOS for Email Configuration Guide.
Cisco IronPort AsyncOS for Email Configuration Guide.
So far, we have been using an Email Gateway configuration with the following interfaces defined as
shown in
shown in
Figure 21-9
Example Public and Private Interfaces
In the following example, the IP Interfaces page confirms that these two interfaces (PrivateNet and
PublicNet) have been configured, in addition to the Management interface.
PublicNet) have been configured, in addition to the Management interface.
Figure 21-10
IP Interfaces Page
Next, the Add IP Interface page is used to create a new interface named PublicNet2 on the Data2 Ethernet
interface. The IP address of 192.168.2.2 is used, and the hostname of
interface. The IP address of 192.168.2.2 is used, and the hostname of
mail4.example.com
is specified.
The services for FTP (port 21), Telnet (port 23), and SSH (port 22) are then enabled.
Ethernet interface: Data 2
IP interface: PublicNet 192.168.2.1
IronPort Email
Security appliance
Ethernet interface: Data 1
IP interface: PrivateNet 192.168.1.1)