Cisco Cisco Web Security Appliance S170 Guia Do Utilizador
3-19
Cisco AsyncOS for Web User Guide
Chapter 3 Connect, Install, and Configure
Using the P2 Data Interface for Web Proxy Data
By default, both kinds of traffic use the routes defined for all configured network interfaces. However,
you can choose to split the routes (“split routing”) so that the M1 interface is only used for management
traffic. When you enable split routing, data traffic only uses the routes configured for the data interfaces
(P1 and P2, if configured), and management traffic uses the routes configured for all configured network
interfaces.
you can choose to split the routes (“split routing”) so that the M1 interface is only used for management
traffic. When you enable split routing, data traffic only uses the routes configured for the data interfaces
(P1 and P2, if configured), and management traffic uses the routes configured for all configured network
interfaces.
The number of sections on the Network > Routes page is determined by whether or not split routing is
enabled:
enabled:
•
Separate route configuration sections for Management and Data traffic (split routing enabled).
When you use the Management interface for management traffic only (“Restrict M1 port” is
enabled), then this page includes two sections to enter routes, one for management traffic and one
for data traffic.
When you use the Management interface for management traffic only (“Restrict M1 port” is
enabled), then this page includes two sections to enter routes, one for management traffic and one
for data traffic.
•
One route configuration section for all traffic (split routing enabled). When you use the
Management interface for both management and data traffic (“Restrict M1 port” is disabled), then
this page includes one section to enter routes for all traffic that leaves the Web Security appliance,
both management and data traffic.
Management interface for both management and data traffic (“Restrict M1 port” is disabled), then
this page includes one section to enter routes for all traffic that leaves the Web Security appliance,
both management and data traffic.
Note
A route gateway must reside on the same subnet as the Management or Data interface on which it is
configured. If multiple data ports are enabled, the web proxy sends out transactions on the data interface
that is on the same network as the default gateway configured for data traffic.
configured. If multiple data ports are enabled, the web proxy sends out transactions on the data interface
that is on the same network as the default gateway configured for data traffic.
Related Topics
•
To enable split routing of management and data traffic, see
Modifying the Default Route
Step 1
Choose Network > Routes.
Step 2
Click on Default Route in the Management or Data table as required (or the combined
Management/Data table if split routing is not enabled).
Management/Data table if split routing is not enabled).
Step 3
In the Gateway column, enter the IP address of the computer system on the next hop of the network
connected to the network interface you are editing.
connected to the network interface you are editing.
Step 4
Submit and commit your changes.
Adding a Route
Step 1
Choose Network > Routes.
Step 2
Click the Add Route button corresponding to the interface for which you are creating the route.
Step 3
Enter a Name, Destination Network, and Gateway.
Step 4
Submit and commit your changes.