Cisco Cisco FirePOWER Appliance 7125 설치 가이드
Quick Start Guide - 7000 Series Devices
CONNECTING INLINE INTERFACES
7000 SERIES
Inline Interface Cabling
For each network segment you want to monitor inline, connect the appropriate cables (either copper or fiber sequentially to
pairs of sensing interfaces.
Use this cabling when you want to configure inline, inline with fail-open, switched, routed, or hybrid interfaces.
pairs of sensing interfaces.
Use this cabling when you want to configure inline, inline with fail-open, switched, routed, or hybrid interfaces.
2014-5.3-3
If you want to take advantage of the device’s configurable fail-open capability, you must cable a sequential pair of
vertical interfaces (interfaces 1 and 2, 3 and 4, 5 and 6, or 7 and 8) to a network segment.
vertical interfaces (interfaces 1 and 2, 3 and 4, 5 and 6, or 7 and 8) to a network segment.
After you cable the interfaces, use the web interface on the Defense Center that manages the device to configure the
interface as inline with fail-open. See Setting Up an IPS Device in the
interface as inline with fail-open. See Setting Up an IPS Device in the
Sourcefire 3D System User Guide.
Inline with Fail-Open Configuration
INLINE
NETWORK
SEGMENT B
NETWORK
SEGMENT B
INLINE
NETWORK
SEGMENT A
NETWORK
SEGMENT A
3D7010/7020/7030
If you want to take advantage of the device’s configurable fail-open capability, you must cable a sequential pair of
interfaces (interfaces 1 and 2, 3 and 4, 5 and 6, or 7 and 8) to a network segment.
interfaces (interfaces 1 and 2, 3 and 4, 5 and 6, or 7 and 8) to a network segment.
After you cable the interfaces, use the web interface on the Defense Center that manages the device to configure the
interface as inline with fail-open. See Setting Up an IPS Device in the
interface as inline with fail-open. See Setting Up an IPS Device in the
Sourcefire 3D System User Guide.
Inline with Fail-Open Configuration
Copper Interfaces
INLINE
NETWORK
SEGMENT B
NETWORK
SEGMENT B
INLINE
NETWORK
SEGMENT A
NETWORK
SEGMENT A
Fiber Interfaces
1
2
3
4
5
6
7
8
1
2
3
4
5
6
7
8
3D7110/7120
INLINE
NETWORK
SEGMENT A
NETWORK
SEGMENT A
Copper Interfaces
INLINE
NETWORK
SEGMENT B
NETWORK
SEGMENT B
SFP Interfaces
You can configure SFP interfaces inline, but SFP interfaces do not have inline fail-open capability. If you want to take
advantage of the device’s configurable fail-open capability, you must cable a sequential pair of copper interfaces
(interfaces 1 and 2, or 3 and 4) to a network segment.
advantage of the device’s configurable fail-open capability, you must cable a sequential pair of copper interfaces
(interfaces 1 and 2, or 3 and 4) to a network segment.
After you cable the interfaces, use the web interface on the Defense Center that manages the device to configure the
interface as inline with fail-open. See Setting Up an IPS Device in the
interface as inline with fail-open. See Setting Up an IPS Device in the
Sourcefire 3D System User Guide.
Inline with Fail-Open Configuration
3D7115/7125, AMP7150
Page 5 of 8