Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Página de 1211
 
24-61
AsyncOS 9.1.2 for Cisco Email Security Appliances User Guide
 
Chapter 24      Configuring Routing and Delivery Features
  Configuring Mail Gateways for all Hosted Domains Using Virtual Gateway™ Technology
Creating New IP Interfaces for Use with Virtual Gateways
After the IP addresses and hostnames have been established, the first step in configuring the Virtual 
Gateway addresses is to create new IP interfaces with the IP/hostname pairs using the Network > IP 
Interfaces page in the GUI or the 
interfaceconfig
 command in the CLI. 
Once the IP interfaces have been configured, you have the option to combine multiple IP interfaces into 
interface groups; these groups can then be assigned to specific Virtual Gateways addresses which the 
system cycles through in a “round robin” fashion when delivering email.
After creating the required IP interfaces, you have two options for setting up the Virtual Gateway 
addresses and defining which email campaign will be sent from each IP interface or interface group:
You can use the 
altsrchost
 command to map email from specific sender IP addresses or Envelope 
Sender address information to a host IP interface (Virtual Gateway address) or interface group for 
delivery.
Using message filters, you can set up specific filters to deliver flagged messages using a specific 
host IP interface (Virtual Gateway address) or interface group. See 
. (This method is more flexible and powerful than the one 
above.) 
For more information about creating IP interfaces, see the “Accessing the Appliance” appendix.
So far, we have been using an Email Gateway configuration with the following interfaces defined as 
shown in 
Figure 24-9
Example Public and Private Interfaces
Next, the Add IP Interface page is used to create a new interface named PublicNet2 on the Data2 Ethernet 
interface. The IP address of 192.168.2.2 is used, and the hostname of 
mail4.example.com
 is specified. 
The services for FTP (port 21) and SSH (port 22) are then enabled.
Our Email Gateway configuration now looks like this: 
Ethernet interface: Data 2
IP interface: PublicNet 192.168.2.1
IronPort Email 
Security appliance
Ethernet interface: Data 1
IP interface: PrivateNet 192.168.1.1)