Cisco Cisco Web Security Appliance S170 사용자 가이드

다운로드
페이지 734
 
26-7
Cisco IronPort AsyncOS 7.5.7 for Web User Guide
 
Chapter 26      Configuring Network Settings
Virtual Local Area Networks (VLANs)
Step 2
Click the Add Route button corresponding to the interface for which you are creating the route. The Add 
Route page is displayed. 
Step 3
Enter a Name, Destination Network, and Gateway.
Step 4
Submit and commit your changes.
Virtual Local Area Networks (VLANs)
VLANs are virtual local area networks bound to physical data ports. You can configure one or more 
VLANs to increase the number of networks the IronPort appliance can connect to beyond the number of 
physical interfaces included. For example, a Web Security appliance has two data interfaces available 
for VLANs: P1 and Management. VLANs allow more networks to be defined on separate “ports” on 
existing interfaces. 
 provides an example of configuring several VLANs on the P1 interface.
Figure 26-4
Using VLANs to Increase the Number of Networks Available on the Appliance
VLANs can be used to segment networks for security purposes, to ease administration, or increase 
bandwidth. For example, create multiple VLANs on the P1 interface and then apply different policies to 
each. VLANs appear as dynamic “Data Ports” labeled in the format of: “VLAN DDDD” where the 
“DDDD” is the ID and is an integer up to 4 digits long (VLAN 2, or VLAN 4094 for example). AsyncOS 
supports up to 30 VLANs. Duplicate VLAN IDs are not allowed on an IronPort appliance.
NOC
DMZ
VLAN
“Router”
VLAN1
VLAN3
VLAN2
Cisco IronPort appliance configured for 
VLAN1, VLAN2, and VLAN3